Sophos Mobile Control
24.3 Corporate keyring synchronization
Corporate keyring synchronization adds the following features to the Sophos Secure Workspace app:
■
■
The keys from a user's SafeGuard Enterprise keyring are available in the Sophos Secure
Workspace keyring (SSW keyring).
Users of the app can then use the keys to decrypt and view documents, or encrypt documents.
■
■
■
Users can continue to use local keys that were available in their SSW keyring when you enabled keyring synchronization.
Users cannot create new local keys.
For security reasons, the keys from the SafeGuard keyring are removed from a device when the Sophos container is locked.
24.3.1 Enable corporate keyring synchronization
Prerequisites:
■
You use Sophos SafeGuard Enterprise 8.0.
■
■
You have configured external user management for the Self Service Portal, using the same
Active Directory user database that is configured in SafeGuard Enterprise.
Sophos Secure Workspace is managed by Sophos Mobile Control. This requires an SMC
Advanced license.
To enable corporate keyring synchronization, you set up a connection between Sophos Mobile
Control and Sophos SafeGuard Enterprise as follows:
1. On the menu sidebar, under SETTINGS, click Setup > System setup, and then click the SGN tab.
2. Click the Certificate link to download the certificate of the Sophos Mobile Control server.
3. Open SafeGuard Management Center and go to Tools > Configuration Package Tool.
4. On the Servers tab, click Add, browse for the certificate file and then click OK. Do not change the value of the Server name field.
5. Optional: Select Recovery via mobile to enable the synchronization of BitLocker and FileVault recovery keys with the Sophos Secure Workspace app.
6. On the Managed client packages tab, configure the following settings:
■
■
■
In the Configuration Package Name field, select Managed Client (Default).
In the Primary Server field, select your SGN server.
In the Transport Encryption field, select SSL.
7. Click Create Configuration Package.
8. On the SGN tab of the Sophos Mobile Control console, click Upload a file to upload the configuration package that you created in the SafeGuard Management Center to Sophos
Mobile Control.
9. Click Save to save the SafeGuard integration settings.
212
