I have found that you can force the Sophos Update Manager to re-download the entire WAREHOUSE folder structure and recreate the CIDs – this has been successful for me many times Stop the Sophos Update Manager service Rename Warehouse, CIDs and Working from the C:\Program Data\Sophos\Update Manager folder line – this folder may change depending on your OS versions In the C:\Program Files (x86)\Sophos\SCC\SUM (For Small Business Edition SCC — may be different on SEC/SEM) rename the ?files Restart the Sophos Update Manager service Kick off an update in the Sophos Control Center or Enterprise Manager – watch as the Warehouse folder populates, it will take some time as it will be a few hundred megabytes.If the Installation Deployer command is executed from root it will run without a GUI session and without needing additional authentication.
Unfortunately Sophos have made this installer an application and not an installer package.
As a result it cannot be deployed using Apple Remote Desktop, Casper, Munki, or any other Mac management tool.
The Enterprise Console however didn’t display the current statistics and showed error “An update manager has not updated since ”.
The updates were, however, installed months earlier.
The final possibility and the one Sophos are pushing Mac only customers to, is to sign up for an subscription to Sophos Cloud.
This does let you manage via the Cloud your Macs, it does let your Macs directly update from Sophos, but a) the website for Sophos Cloud is not 100% Safari friendly, and much more importantly b) the installer it produces is yet again an application and not an installer package!Eventually it should recreate the Warehouse fully and recreate the CIDs structure too. This would make more sense to me if the updates were installed a day (or week) before the error occurred.Note: Yes if you install SAV9 manually on a Mac and then make a monolithic master disk image that would work, however I like many others now prefer to use a thin imaging approach (via Insta DMG or Auto DMG).Good spot, it does get us closer but that mpkg does not contain the pre-configured auto-update settings.The only approach that gives you a proper installer package is via Sophos Enterprise Console running on a Windows server.