Activate SSL encryption in SafeGuard Enterprise

• Connection between web server and database server:

  Activate SSL encryption when registering the SafeGuard Enterprise Server in the SafeGuard Management Center Configuration Package Tool. For more information, see Configure the database server connection or see Sophos knowledge base article 109012.

• Connection between the database server and SafeGuard Management Center:

  Activate SSL encryption in the SafeGuard Management Center Configuration Wizard, see Configure the database server connection.

• Connection between SafeGuard Enterprise Server and the SafeGuard Enterprise protected endpoint:

  Activate SSL encryption when creating the configuration package for the managed endpoints in the SafeGuard Management Center Configuration Package Tool, see Create configuration package for managed computers.

  For information on how to configure the SafeGuard Enterprise Server to use SSL for securing communication, see Configure the SGNSRV web page for SSL.

  Make certificates available on endpoints:

  • For Windows endpoints, see Assign the SSL certificate to Windows endpoints.
  • For macOS endpoints, see Import the SSL certificate on Macs

We recommend that you set SSL encryption for SafeGuard Enterprise during first-time configuration of the SafeGuard Enterprise components. If you do it later, you need to create a new configuration package and install it on the relevant server or managed endpoints.