Sophos Mobile Control  4.0  release notes

Sophos Mobile Control platforms

Supported platforms

Detailed version

Operation system


Windows Server 2008 32/64 bit

SP 1

Windows Server 2008 R2 64 bit

SP 1

Windows Server 2012 (64 bit)

Latest SP

Windows Server 2012 (64 bit) R2

Latest SP

Java JDK version



7u45 or higher


8u5 or higher

Database version


Microsoft SQL Server 2008 (32/64 bit)

SP 3

Microsoft SQL Server 2008 R2 (64 bit)

SP 2

Microsoft SQL Server 2012 (64) bit)

SP 1

Microsoft SQL Server 2012 Express

SP 1

MySQL on Windows Servers


Mobile operation system


Apple iOS

4.3 or higher






2.3.3 or higher (Android phones)

3.0 or higher (Android tablets)

4.x (tablets and smartphones)

5.x (tablets and smartphones)

Windows Phone 8



Windows Mobile Professional

6.1, 6.5

RIM Blackberry Integration

BlackBerry Enterprise Server 5.0.3 or higher



Internet Explorer

8, 9, 10

Mozilla Firefox

25 or higher

Google Chrome

26 or higher

Directory servers


Microsoft ActiveDirectory

As included in the Windows Server versions above.


As provided by the Zimbra server below

Novell eDirectory

8.8 SP 6

Lotus Domino


Email systems


Microsoft Exchange

2003 SP2

2007 SP3

2010 SP2


Lotus Domino Traveler




CA server


Windows Server 2008 32/64 bit


Windows Server 2008 R2 64 bit


Windows Server 2012 64 bit

Latest SP

Windows Server 2012 R1 64 bit

Latest SP

Note: For Android versions up to version 4.0.4 Google accounts have to be available on devices, if you want to set up Sophos Mobile Control on devices without telephone numbers (for example tablets). The accounts are required for using GCM (Google Cloud Messaging). For Android version 4.0.4 and 4.1 and higher Google accounts are no longer required.

Note: Android 4.2 devices including all new features except the multi user feature are supported. If the 4.2 multi user feature is used on a device, only the first user that is registered in Sophos Mobile Control can be managed.

Note: Sophos Mobile Encryption Management requires iOS7.

Note: Sophos supports only official Android versions. Sophos does not guarantee that the SMC Android client is working with all the different custom roms available.

What’s new in version 4

For further information, see


For details on installing the Sophos Mobile Control Server, refer to the Sophos Mobile Control installation guide. For details on installing and setting up Sophos Mobile Control on end user devices by using the Sophos Mobile Control Self Service Portal, refer to the Sophos Mobile Control user guides for Android, Apple iOS, Windows Phone 8 and Windows Mobile. You can download the product documentation at

License reporting

With Sophos Mobile Control 3.6 license reporting was introduced. For further information, see

Known issues


Sophos Mobile Control license in a folder with Japanese characters in the folder name (DEF85338)

If the Sophos Mobile Control license file is placed in a folder with Japanese characters in the name for installation, the installation process fails.

End user device

Windows Mobile

SMC Mobile client on Windows Mobile devices with Cyrillic character set

The SMC Mobile client does not work on Windows Mobile devices with a Cyrillic character set.

SMC app crashes on Windows Phone 8 devices when Show privacy policy is selected

If the keyboard is open on the activation page on a Windows Phone 8 device and you select Show privacy policy from the app bar, the app crashes. This is caused by the Cimbalino Library used on the device.


On some SAMSUNG SAFE devices removing an Android profile with a certificate does not remove the certificate from the device

On some SAMSUNG SAFE devices (e.g. seen on a Samsung S3 mini with Android 4.1.2) installing a Root-certificate via a profile works fine without any issues. If the profile is removed again from the device via the Sophos Mobile Control console the devices synchronizes with the server but the certificate itself is not removed from the device. This is an issue of the Samsung API that according to Samsung will be fixed within the next Android (Kitkat) upgrade of affected devices, e.g. Samsung S3 mini with Android 4.1.2

On some SAMSUNG SAFE devices it is not possible to add a profile with a root certificate

On some SAMSUNG SAFE devices (e.g. seen on a Samsung Galaxy S2 with Android 4.0.3) installing a root certificate via a profile does not work. This is an issue of the Samsung API where a call to a Samsung API returns success although the root certificate could not be installed on the device.

On some SAMSUNG SAFE devices it is not possible to remove the VPN profile from the device

On some SAMSUNG SAFE devices (e.g. seen on a Samsung Galaxy S2 with Android 4.0.3) removing a VPN profile via the SMC admin does not work. This is an issue on the Samsung API on the device where removing the profile via a call to the Samsung API succeeds although the VPN profile is actually not removed on the device.


When use of Safari (iOS Browser) is restricted via a profile recommended and required apps cannot be installed via an iTunes link

Installing a recommended or required app via an iTunes link on an iOS device requires the use of Safari. If the use of Safari is restricted, recommended and required apps cannot be installed via an iTunes link.

Automatic synchronization of the SMC app against the server does not work reliably

In some cases the silent trigger sent by the SMC server does not result in an automatic background synchronization. In those cases the user can still synchronize the app manually.

Sophos Mobile Control Web Console

Exception on empty tables

If you click the >> button on an empty table, a “div by zero” exception occurs.

Device reports

If you create a device report as a Multi Tenancy Admin user, the insert date is included, but it is not shown in the column definition (header).

Synchronizing an Android device with an Exchange Server

Android devices are automatically enabled through EAS Proxy, if the device was registered with the Self Service Portal. If an administrator has added the phone to Sophos Mobile Control, it is required to enter the sAMAccountName in the respective property of the device details view to make ActiveSync synchronization possible. If devices are registered with an LDAP entry and SSP, this is not necessary (this only applies to Microsoft ActiveDirectory).

State “Exported” shown for uninstalled client (DEF71889)

After uninstalling a client by using Applications > Uninstall the state Exported is shown in the Task view for the uninstallation task. The client has been uninstalled, but the task state is not updated.

MDM Agent property keeps value 1 after uninstallation (DEF72393)

When a new device is created, the MDM Agent property shows 0 under Value on the Device page. When the SMC client is installed, the value changes to 1. After uninstalling the client by using Applications > Uninstall, the MDM Agent property still shows the value 1.

Command KillProcess in command bundles for Windows Mobile devices (DEF76577)

The command KillProcess for Windows Mobile devices is always shown to be finished successfully, even if the relevant process is still running after the command has been applied.

Select package page does not show existing packages for Windows Mobile (DEF76672)

When creating a new task bundle for Windows Mobile devices the Select package page for the type WinMobileProfileTransfer does not show any packages.

Personal settings display error (DEF76713)

If you change the setting Lines per page in tables in the Personal tab of the General settings page in Internet Explorer 8, a display error occurs

Filter in task view is closed after refresh interval (DEF76721)

When you click the blue magnifier icon in Task view to filter the view, the filter is closed after the refresh interval.

Filter does not support Unicode characters in profile names (DEF76894)

Profiles with Unicode characters in their names are not found when you apply a filter on the Profiles page.

Blocking of email access (DEF76982)

If several Android devices are registered for the same user in the Self Service Portal and email access is blocked for one of the devices, access is blocked for another device, not for the one intended. This problem is caused by limitations in the Android operating system.

Managed/compliant status for a device is not updated after device wipe (DEF83156)

After you have sent a wipe command to a registered device, the device status icons for “Managed” and “Compliant” are not updated accordingly.

Apple VPP not supported in some countries: Pending VPP code status (DEF86570)

The Apple Volume Purchase Program is not supported in some countries, for example Austria. If you try to push an app with Austrian Apple Store access, the app cannot be installed. The relevant VPP code remains in status “Pending” and cannot be used anymore. The Apple Volume Purchase Program is supported in the following countries: Australia, Canada, France, Germany, Italy, Japan, New Zealand, Spain, the United Kingdom and the United States.

Apps cannot be pushed to iPads with iOS 4.3.5.

If you try to push an app trough the Sophos Mobile Control web console to iPads with iOS 4.3.5, an error message is displayed.

Changing the refresh interval in the Task view (DEF90010)

If you change the refresh interval in the Refresh interval (in sec) field in the Task view, the Dashboard is displayed instead of the Task view.

The activity indicator is not shown when saving a device

Saving a device may take a few seconds if many devices are registered in the system. The activity indicator known from other web console actions is not shown in this case.

Sophos Mobile Control Self Service Portal

Pressing Enter during device registration (DEF72876)

When you press Enter during device registration in the Self Service Portal (for example after entering a confirmation code), the previous page is displayed instead of the next one.

Back button as default (DEF76840)

When navigating through the Self Service Portal pages the Back button is always the Default.

Technical support

You can find technical support for Sophos products in any of these ways:

Legal notices

Copyright © 2014-2015 Sophos Ltd. All rights reserved.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos is a registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.