Company Certificate Change Orders

Company Certificate Change Orders (CCOs) are used in the following cases:

To renew the company certificate in case it will expire soon.
Renewing the company certificate is possible for managed and unmanaged endpoints but can only be triggered from the management console.
To move unmanaged endpoints to a different environment, for example if you have two different Sophos SafeGuard environments and want to merge them into one Sophos SafeGuard environment where always one of the two environments has to be the target environment.
This is done by exchanging the company certificate of the endpoints of one environment with the company certificate of the target environment.
Only Master Security Officers are allowed to create CCOs. To give other security officers the permission to create CCOs, the MSO must create a custom role and assign the right to Manage CCOs to this role.