This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Recover Tamper protection password for a deleted device

One of our laptop endpoints has Sophos agent installed using the package provided from Sophos Central, but the device doesn't show on our devices list. This device may have been deleted in the past since the license wasn't needed at the time. Now we need to reactivate the AV monitoring on this device.

In order to add it back, we are also unable to reinstall the software since it is protected by a tamper protection password. I cannot find the tamper protection password for this endpoint since the device isn't listed in Sophos Central.

We are stuck in a catch 22? How can we proceed? Any ideas/suggestions?

This thread was automatically locked due to age.

Parents

0 jak over 4 years ago

You will need to boot into Safe Mode:
https://community.sophos.com/kb/en-us/124377

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 Chirag Bhatt over 4 years ago in reply to jak

Thanks Jak for the suggestion. The instructions in here are for a Windows machine. The laptop in question here is running MacOS so the steps don't apply.

I could not find anything similar for Mac, but I could be overlooking something.
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 4 years ago in reply to Chirag Bhatt

OK, does this help:
https://community.sophos.com/products/sophos-central/f/sophos-central/79952/computer-removed-with-tamper-protection-enabled-mac
I don't have a Mac handy to try, sorry.
Cancel
Vote Up 0 Vote Down

Cancel
0 DianneY over 4 years ago in reply to Chirag Bhatt

Hello Chirag Bhatt

Other than what jak suggested, you can also look in to this one Unable to Uninstall Sophos Endpoint 9.6.2 from a Mac.
Cancel
Vote Up 0 Vote Down

Cancel
0 Chirag Bhatt over 4 years ago in reply to DianneY

Thanks DianneY and jak! The links provided were promising, but unfortunately neither of the approaches suggested worked.

Running the command line (below) worked, but when I run the uninstaller, it still asks for the tamper protection password

sudo defaults write /Library/Preferences/com.sophos.sav TamperProtectionEnabled -bool false

It seems to be ignoring this preference. Appreciate any other suggestions.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Chirag Bhatt over 4 years ago in reply to DianneY

Thanks DianneY and jak! The links provided were promising, but unfortunately neither of the approaches suggested worked.

Running the command line (below) worked, but when I run the uninstaller, it still asks for the tamper protection password

sudo defaults write /Library/Preferences/com.sophos.sav TamperProtectionEnabled -bool false

It seems to be ignoring this preference. Appreciate any other suggestions.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 DianneY over 4 years ago in reply to Chirag Bhatt

Hmm, what about giving this Sophos Anti-Virus for Mac: Removal tool a try?
Cancel
Vote Up 0 Vote Down

Cancel