Sophos
SafeGuard Disk Encryption for Mac 6.1 Release Notes
Requirements
Client
- Mac OS X
10.8
- Mac OS X
10.9
- Mac OS X
10.10
Management Center 6.10
- Windows
7 Home Premium/ Enterprise/ Business/ Ultimate Edition SP1 only – 32 and
64-bit
- Windows
8 Pro/ Enterprise Edition – 32 and 64-bit
- Windows
Server 2008 - 32 and 64-bit
- Windows
Server 2008 R2 – 64-bit
- Windows
Server 2012 – 64-bit
- SSL
must be used as transport encryption
SGN-Server 6.10
- Windows
Server 2008 - 32 and 64-bit
- Windows
Server 2008 R2 – 64-bit
- Windows
Server 2012 – 64-bit
- SSL
must be used as transport encryption
Database
- Microsoft
SQL Server 2008 and 2012
- Microsoft
SQL Server 2008 and 2012 Express edition
Limitations
- Directory
Users
- FileVault
2 requires either a local account or a mobile account. Please create a
mobile account for Active Directory users or Apple Open Directory users
if they should be able to activate FileVault 2 or if they should be
enabled for FileVault 2.
- Inventory
Reporting
- Drives
are only reported if they reside on a GUID partition table. Volumes
within an Apple Partition Map or Master Boot Record Partition scheme are
not visible in the drive inventory.
- The
encryption status is sometimes not updated in the inventory view until
the Mac is rebooted.
- Limitations
on Mac OS X 10.8
- Adding
a user to FileVault 2 requires the authentication of an already enabled
user.
- The
recovery key cannot be validated when it is imported with sgdeadmin.
- The
recovery key cannot be changed after it was used to start the Mac.
- Apple
Open Directory
- Open
Directory users are auto registered as local users in SafeGuard
Management Center.
- Pure
Open Directory network users (without a mobile account) are asked for
their password to enable FileVault 2 or to get enabled for FileVault 2,
even though the operation will fail.
- Encryption
- Only
the system disc (partition) will be encrypted. Other volumes will be
supported in the next release.
Known
Issues
- It
may happen that the recovery key is not available in SafeGuard during the
very first restart after enabling the disk encryption, it will be
available after the first restart in this case.
- When
the SafeGuard system menu is activated, it may take some time until the
SafeGuard icon is displayed in the system menu bar.
- It
may take up to 5 minutes until the correct encryption state is shown in
the SafeGuard preference pane after FileVault encryption has finished.
- The
user notification to restart the Mac after the decryption has finished is
not displayed on Mac OS X 10.9 if the computer was restarted during the
decryption.
- Adding
the currently logged in user is only provided when the synchronization
with the SGN Server is working.
- The
Decrypt System Disk button in the preference pane may be enabled while the
encryption is currently running and the preference pane is opened
immediately after login and the security officer has assigned a "No
Encryption" policy. Pressing the button will result in an error and
the encryption continues. After
some minutes, the button will be disabled.
- The
installation, upgrade and uninstallation of SafeGuard Disk Encryption for
Mac can take longer (up to 5 - 20 minutes), if your Mac is located behind
a firewall. In order to speed up the installation, either disconnect it
from any network or allow direct Internet access. Please note that this is
a general OSX issue and is caused by the verification of the digital
signature via Apple servers, with which SafeGuard’s files are signed.
- The
SafeGuard system menu cannot be enabled or disabled if sgdeadmin is used
with sudo.
- The recovery key gets invalid after it was used to login in OS X 10.9 if SafeGuard Disk Encryption beta version was installed. FileVault 2 has to be disabled and enabled again to solve this issue.
Technical Support
You can find technical support for Sophos products in any of these ways:
- Visit the SophosTalk
community at community.sophos.com/ and search for other users who are
experiencing the same problem.
- Visit the Sophos support knowledgebase at www.sophos.com/en-us/support.aspx.
- Download the product documentation at www.sophos.com/en-us/support/documentation/.
- Send an email to support@sophos.com, including your Sophos software version number(s),
operating system(s) and patch level(s), and the text of any error messages.
Legal Notices
Copyright © 2014 Sophos Limited. All rights reserved. No part of this publication may be
reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic,
mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the
documentation can be reproduced in accordance with the license terms or you otherwise have
the prior permission in writing of the copyright owner.
Sophos, Sophos Anti-Virus and SafeGuard are registered trademarks of Sophos Limited, Sophos
Group and Utimaco Safeware AG, as applicable.All other product and company names mentioned
are trademarks or registered trademarks of their respective owners.
Disclaimer and Copyright for 3rd Party Software
Portions of this software are copyright © 2010 The FreeType Project (www.freetype.org).All rights
reserved.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit
(www.openssl.org).