|Managing Mac endpoints / About SafeGuard File Encryption for Mac|
The Sophos SafeGuard key ring is secured with a user certificate. The corresponding private key is protected by the OS X password.
The password is required to allow the certificate to be generated if the user has not been created in SafeGuard Enterprise.
Users can change their passwords locally in System Preferences > Users & Groups, and no further steps are required.
For details of how to reset a forgotten password, see Reset forgotten password.