Supported platforms |
Detailed version |
Operation system |
Version |
Windows Server 2008 32/64 bit |
SP 1 |
Windows Server 2008 R2 64 bit |
SP 1 |
Windows Server 2012 (64 bit) |
Latest SP |
Windows Server 2012 (64 bit) R2 |
Latest SP |
Java JDK version |
Version |
JDK 7 |
7u45 or higher |
JDK 8 |
8u5 or higher |
Database version |
Version |
Microsoft SQL Server 2008 (32/64 bit) |
SP 3 |
Microsoft SQL Server 2008 R2 (64 bit) |
SP 2 |
Microsoft SQL Server 2012 (64) bit) |
SP 1 |
Microsoft SQL Server 2012 Express |
SP 1 |
MySQL on Windows Servers |
5.5 |
Mobile operation system |
Version |
Apple iOS |
4.3 or higher 5.x 6.x 7.x 8.x |
Android |
2.3.3 or higher (Android phones) 3.0 or higher (Android tablets) 4.x (tablets and smartphones) 5.x (tablets and smartphones) |
Windows Phone 8 |
8.0.x 8.1.x |
Windows Mobile Professional |
6.1, 6.5 |
RIM Blackberry Integration |
BlackBerry Enterprise Server 5.0.3 or higher |
Browser |
Version |
Internet Explorer |
8, 9, 10 |
Mozilla Firefox |
25 or higher |
Google Chrome |
26 or higher |
Directory servers |
Version |
Microsoft ActiveDirectory |
As included in the Windows Server versions above. |
OpenLDAP |
As provided by the Zimbra server below |
Novell eDirectory |
8.8 SP 6 |
Lotus Domino |
8.5.3 |
Email systems |
Version |
Microsoft Exchange |
2003 SP2 2007 SP3 2010 SP2 2013 |
Lotus Domino Traveler |
8.5 |
Zimbra |
8.0 |
CA server |
Version |
Windows Server 2008 32/64 bit |
SP1 |
Windows Server 2008 R2 64 bit |
SP1 |
Windows Server 2012 64 bit |
Latest SP |
Windows Server 2012 R1 64 bit |
Latest SP |
Note: For Android versions up to
version 4.0.4 Google
accounts have to be available on devices, if you want to set up Sophos Mobile
Control on devices without telephone numbers (for example tablets). The
accounts are required for using GCM (Google Cloud Messaging). For Android
version 4.0.4 and 4.1 and higher Google accounts are no longer required.
Note: Android 4.2 devices including all new features except the multi user feature are supported. If the 4.2 multi user feature is used on a device, only the first user that is registered in Sophos Mobile Control can be managed.
Note: Sophos Mobile Encryption Management requires iOS7.
Note: Sophos supports only official Android versions. Sophos does not guarantee that the SMC Android client is working with all the different custom roms available.
For further information, see http://www.sophos.com/en-us/support/knowledgebase/120871.aspx.
For details on installing the Sophos Mobile Control Server, refer to the Sophos Mobile Control installation guide. For details on installing and setting up Sophos Mobile Control on end user devices by using the Sophos Mobile Control Self Service Portal, refer to the Sophos Mobile Control user guides for Android, Apple iOS, Windows Phone 8 and Windows Mobile. You can download the product documentation at http://www.sophos.com/en-us/support/documentation/mobile-control.aspx.
License reporting
With Sophos Mobile Control 3.6 license reporting was introduced. For further information, see http://www.sophos.com/en-us/support/knowledgebase/120127.aspx.
If the Sophos Mobile Control license file is placed in a folder with Japanese characters in the name for installation, the installation process fails.
The SMC Mobile client does not work on Windows Mobile devices with a Cyrillic character set.
If the keyboard is open on the activation page on a Windows Phone 8 device and you select Show privacy policy from the app bar, the app crashes. This is caused by the Cimbalino Library used on the device.
On some SAMSUNG SAFE devices (e.g. seen on a Samsung S3 mini with Android 4.1.2) installing a Root-certificate via a profile works fine without any issues. If the profile is removed again from the device via the Sophos Mobile Control console the devices synchronizes with the server but the certificate itself is not removed from the device. This is an issue of the Samsung API that according to Samsung will be fixed within the next Android (Kitkat) upgrade of affected devices, e.g. Samsung S3 mini with Android 4.1.2
On some SAMSUNG SAFE devices (e.g. seen on a Samsung Galaxy S2 with Android 4.0.3) installing a root certificate via a profile does not work. This is an issue of the Samsung API where a call to a Samsung API returns success although the root certificate could not be installed on the device.
On some SAMSUNG SAFE devices (e.g. seen on a Samsung Galaxy S2 with Android 4.0.3) removing a VPN profile via the SMC admin does not work. This is an issue on the Samsung API on the device where removing the profile via a call to the Samsung API succeeds although the VPN profile is actually not removed on the device.
When use of Safari (iOS Browser) is restricted via a profile recommended and required apps cannot be installed via an iTunes link
Installing a recommended or required app via an iTunes link on an iOS device requires the use of Safari. If the use of Safari is restricted, recommended and required apps cannot be installed via an iTunes link.
Automatic synchronization of the SMC app against the server does not work reliably
In some cases the silent trigger sent by the SMC server does not result in an automatic background synchronization. In those cases the user can still synchronize the app manually.
If you click the >> button on an empty table, a “div by zero” exception occurs.
If you create a device report as a Multi Tenancy Admin user, the insert date is included, but it is not shown in the column definition (header).
Android devices are automatically enabled through EAS Proxy, if the device was registered with the Self Service Portal. If an administrator has added the phone to Sophos Mobile Control, it is required to enter the sAMAccountName in the respective property of the device details view to make ActiveSync synchronization possible. If devices are registered with an LDAP entry and SSP, this is not necessary (this only applies to Microsoft ActiveDirectory).
After uninstalling a client by using Applications > Uninstall the state Exported is shown in the Task view for the uninstallation task. The client has been uninstalled, but the task state is not updated.
When a new device is created, the MDM Agent property shows 0 under Value on the Device page. When the SMC client is installed, the value changes to 1. After uninstalling the client by using Applications > Uninstall, the MDM Agent property still shows the value 1.
The command KillProcess for Windows Mobile devices is always shown to be finished successfully, even if the relevant process is still running after the command has been applied.
When creating a new task bundle for Windows Mobile devices the Select package page for the type WinMobileProfileTransfer does not show any packages.
If you change the setting Lines per page in tables in the Personal tab of the General settings page in Internet Explorer 8, a display error occurs
When you click the blue magnifier icon in Task view to filter the view, the filter is closed after the refresh interval.
Profiles with Unicode characters in their names are not found when you apply a filter on the Profiles page.
If several Android devices are registered for the same user in the Self Service Portal and email access is blocked for one of the devices, access is blocked for another device, not for the one intended. This problem is caused by limitations in the Android operating system.
After you have sent a wipe command to a registered device, the device status icons for “Managed” and “Compliant” are not updated accordingly.
The Apple Volume Purchase Program is not supported in some countries, for example Austria. If you try to push an app with Austrian Apple Store access, the app cannot be installed. The relevant VPP code remains in status “Pending” and cannot be used anymore. The Apple Volume Purchase Program is supported in the following countries: Australia, Canada, France, Germany, Italy, Japan, New Zealand, Spain, the United Kingdom and the United States.
If you try to push an app trough the Sophos Mobile Control web console to iPads with iOS 4.3.5, an error message is displayed.
If you change the refresh interval in the Refresh interval (in sec) field in the Task view, the Dashboard is displayed instead of the Task view.
The activity indicator is not shown when saving a device
Saving a device may take a few seconds if many devices are registered in the system. The activity indicator known from other web console actions is not shown in this case.
When you press Enter during device registration in the Self Service Portal (for example after entering a confirmation code), the previous page is displayed instead of the next one.
When navigating through the Self Service Portal pages the Back button is always the Default.
You can find technical support for Sophos products in any of these ways:
Copyright © 2014-2015 Sophos Ltd. All rights reserved.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos is a registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.