I wanted to move computers in one sub-estate into another. I disabled Tamper Protection and ran the --registeronly command which did work, however it left the computer in both sub-estates and each has different tamper protection codes. I have to do this for over 50 computers and wanted to know if it's a good idea to remove them from the first sub-estate before moving them to the new sub-estate.
If Tamper Protection has already been disabled, it is safe to delete the device from the previous sub-estate. If you run into issues when running the re-register command, you can also find the…
If Tamper Protection has already been disabled, it is safe to delete the device from the previous sub-estate. If you run into issues when running the re-register command, you can also find the Tamper Protection password for the deleted device from the menu "Logs & Reports > Recover Tamper Protection passwords".
Once the device is registered to the new sub-estate and communicates a policy update, the Tamper Protection password will be updated.
You can use the API documented here to process these transactions including deleting endpoints from the old estate: https://developer.sophos.com/docs/endpoint-v1/1/routes/migrations/post
It is not advisable to delete a device from the original estate until it has been migrated.
Program Manager, Support Readiness | CISSP | Sophos Technical SupportSupport Videos | Product Documentation | @SophosSupport | Sign up for SMS AlertsIf a post solves your question use the 'Verify Answer' link.
The documentation doesn't make it clear how to move hosts between sub-estates. It shows an example there but again, it's not at all clear how to utilize this. Do you have some kind of a walkthrough on how to do this? I can't believe this hasn't been asked before.
You mean a doc or a video? I've been talking with the PM about creating a TechVid for this.
I'll bring the popcorn, you bring the video.
your proposition is... accepted
What kind of timing are we talking about?
It would be a while. I am discussing it with the production team.