Managed Service Provider guide for a single server
7 Modify configuration and registry values
You must modify a configuration file and registry values in the SEC Server to facilitate management via the Internet.
Note: The values used in the examples assume the SEC Server's hostname as sophos-console and its internet routable IP address as 1.2.3.4. These values must be modified to match your SEC
Server's hostname and IP address.
1. Browse to the Update Manager folder.
Windows
Server
32-bit
64-bit
Default location
C:\Program Files\Sophos\Update Manager\
C:\Program Files (x86)\Sophos\Update Manager\
2. Locate the file MRinit.conf and edit the values for MRParentAddress and
ParentRouterAddress.
Default content example:
"MRParentAddress"="sophos-console.abc.domain,sophos-console"
"ParentRouterAddress"="sophos-console.abc.domain,sophos-console"
Modified content example:
Include an externally accessible IP address and the local NetBIOS name for the SEC Server.
"MRParentAddress"="1.2.3.4,sophos-console.msp.com,sophos-console"
"ParentRouterAddress"="1.2.3.4,sophos-console.msp.com,sophos-console"
Save the file and close it. For an example of the modified MRinit.conf file, see Appendix:
MRinit.conf file contents
(page 35).
3. Open the Registry Editor. To open click Start, Run, type
regedit
and then click OK.
4. Take a back up of the registry.
For information on how to take a registry back up, refer to Microsoft documentation.
5. In the Registry Editor window, modify the following two registry values:
■
Sophos Message Router
■
Router
To do this: a) Navigate to the Sophos Message Router registry key:
13
Sophos Endpoint Security and Control
Windows version
32-bit or
64-bit
Default location
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Message
Router\ b) In the right pane, select the entry ImagePath.
c) On the Edit menu, click Modify.
d) In Value data edit the value as follows:
■
For 32-bit computers:
Default value:
"C:\Program Files\Sophos\Enterprise Console\Remote Management
System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://:8193/ssl_port=8194
Modify value:
Modify the value to include the additional text and your externally resolvable fully qualified
domain name as indicated in bold.
"C:\Program Files\Sophos\Enterprise Console\Remote Management
System\RouterNT.exe" -service -name Router -ORBDottedDecimalAddresses 0
-ORBListenEndpoints iiop://:8193/ssl_port=8194&hostname_in_ior=sophos-console.msp.com
■
For 64-bit computers:
Default value:
"C:\Program Files (x86)\Sophos\Enterprise Console\Remote Management
System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://:8193/ssl_port=8194
Modify value:
Modify the value to include the additional text and your externally resolvable fully qualified
domain name as indicated in bold.
"C:\Program Files (x86)\Sophos\Enterprise Console\Remote Management
System\RouterNT.exe" -service -name Router -ORBDottedDecimalAddresses 0
-ORBListenEndpoints iiop://:8193/ssl_port=8194&hostname_in_ior=sophos-console.msp.com e) Navigate to the Router registry key:
14
Managed Service Provider guide for a single server
Windows version
32-bit
64-bit
Default location
HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Messaging System\Router\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Messaging
System\Router\ f) In the right pane, select the entry ServiceArgs.
g) On the Edit menu, click Modify.
h) In Value data edit the value as follows:
Default value:
-ORBListenEndpoints iiop://:8193/ssl_port=8194
Modify value:
Modify the value to include the additional text and your externally resolvable fully qualified
domain name as indicated in bold.
-ORBDottedDecimalAddresses 0 -ORBListenEndpoints iiop://:8193/ssl_port=8194&hostname_in_ior=sophos-console.msp.com
6. Restart the Sophos Message Router service.
The following knowledgebase articles provide more information on this process:
■
■
Knowledgebase article 50832 (Typically, scenario 2 is the most common)
Knowledgebase article 14635
15
