Sophos has discovered a bug in the latest version of the SafeGuard File Encryption Engine, build 29, related to the use of byte-range locks on encrypted files located on network shares. Due to the severity of the issue, the update has been withdrawn. This issue was introduced in build 29 (filter driver version 188.8.131.52) and does not exist in previous versions.
Applies to the following Sophos product(s) and version(s)
SafeGuard Data Exchange 8.1SafeGuard File Encryption 8.1SafeGuard Synchronized Encryption 8.1SafeGuard File Encryption 8.2SafeGuard Synchronized Encryption 8.2SafeGuard Data Exchange 8.2
The issue has been identified and we´re working on a fix for this problem. We plan to provide a new version of the File Encryption Engine in November 2019.
Sophos recommends to use File Encryption Engine build 28 instead of File Encryption Engine build 29 for the time being .
On endpoints on which File Encryption Engine build 29 has been installed, it should be uninstalled. This will automatically switch back to the File Encryption Engine which was installed before e.g. to build 28 if that was the previously installed version. If no File Encryption Engine build was installed, it will fall back to the driver version included in the corresponding SafeGuard Client version.
The update can be uninstalled in the Installed Updates section under Programs and Features.
An installation of File Encryption Engine build 28 is recommended, if no File Encryption Engine update or an older version was installed before. In this case the reboot after the uninstallation can be postponed until after the installation of File Encryption Engine build 28.
As soon as a new version of the File Encryption Engine is available this knowledge base article will be updated accordingly.
This KB article has been revised for clarity.
Feedback and contact If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.