The Sophos Community will be unavailable from 13:00 to 18:00 UTC this Saturday, October 1st for upgrades. Stay tuned to our Twitter account @SophosSupport for updates.
Issue Devices connected to a USB 3.0 port may not be recognized in the SafeGuard Power-On Authentication (POA).
Known to apply to the following Sophos product(s) and version(s) SafeGuard Device EncryptionSafeGuard Device Encryption 6.10.0SafeGuard Device Encryption 7.0
The FreeBSD used at POA level in SafeGuard Enterprise and SafeGuard Easy does not natively support USB 3.0 controllers that do not provide USB 2.0 / USB 1.x backward compatibility. If the USB 3.0 controller / port does not provide backward compatibility, use an alternative USB 2.0 / 1.x port to connect your device.
Note: This only affects the device at POA level - there are no limitations under the Windows Operating System with regards to USB 3.0 functionality.
Some current Intel USB 3.0 controllers contain an integrated USB 2.0 hub. Devices which are attached to a USB 3.0 port can be internally switched to a USB 2.0 port on this hub. Thus, these devices can be accessed using a USB 2.0 driver (e.g. a keyboard in the BIOS). Which ports can be switched depends on the hardware manufacturer and the respective BIOS implementation.
In some cases it can also be possible that the external ports are fixed connected to the USB 3.0 controller and thus not usable in the preboot environment.
As of SafeGuard Device Encryption 6.10, the POA can map switchable USB 3.0 ports to the USB 2.0 hub and with that use attached devices in the preboot environment.
The following Intel USB 3.0 Chipsets are supported as of version 6.10:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.