Company Certificate Change Orders (CCOs) are used in the following cases:
- To renew the company certificate in case it will expire soon.
Renewing the company
certificate is possible for managed and unmanaged endpoints but can only be triggered from the
- To move unmanaged endpoints to a different environment, for example if you have two
different Sophos SafeGuard environments and want to merge them into one Sophos SafeGuard
environment where always one of the two environments has to be the target environment.
is done by exchanging the company certificate of the endpoints of one environment with the
company certificate of the target environment.
Note: Only Master Security Officers are
allowed to create CCOs. To give other security officers the permission to create CCOs, the MSO
must create a custom role and assign the right to Manage CCOs to this