Password handling

The Sophos SafeGuard key ring is secured with a user certificate. The corresponding private key is protected by the OS X password.

The password is required to allow the certificate to be generated if the user has not been created in SafeGuard Enterprise.

Changing password locally

Users can change their passwords locally in System Preferences > Users & Groups, and no further steps are required.

Password has been changed on a different endpoint

Note: Passwords can be changed on Windows as well as Mac endpoints.
Since the password is no longer known on this endpoint the following steps need to be completed:
  1. Log in to OS X with your new password.
  2. The system was unable to unlock your keychain is displayed.
  3. Select Update Keychain Password.
  4. Enter the old password.

For details of how to reset a forgotten password, see Reset forgotten password.