Technical support

Knowledgebase: Recovery
How does Single Sign-On (SSO) Resynchronise?
Article ID: KB502 email a link to this article

Single Sign-On (SSO) Synchronisation

SSO is a feature in the Managed version of ESET Endpoint Encryption (EEE). For more information visit:

KB187 - What is Single Sign-On (SSO)

When does SSO re-sync?

EEE will automatically synchronize the User's Windows password with their EEE FDE pre-boot password when:

  • The User changes their Windows password locally from their machine (using CTRL+ALT+DEL > Change Password).
  • The User signs into their Windows profile on their machine.

What can cause SSO to become out-of-sync?

The password can become out-of-sync when a User:

  1. Has changed their Windows password on another workstation.
  2. Has their Windows password changed for them on a server e.g. using Active Directory on the Domain server.
  3. Has attempted to change their Windows password but the machine was booted using a different User's pre-boot credentials.

How to recover from being out-of-sync?

To recover from examples a & b above:

At the FDE pre-boot screen enter the old password, then new password at the Windows screen (Sync will be performed once you log in to Windows).

Alternatively, if the old password does not work, use 'Lost Details' or 'Reset Password' refer to:

KB143 - How do I reset a managed user's Full Disk Encryption password?

To recover from example c above:

The user will need to re-sync all of their machines individually, as SSO is controlled localy. To do this, please refer to the previous recovery solution.

Known SSO issue with DESlock+ Version 4.9.4

Following the installation of a Windows Feature update, such as 1709 or 1803, you may find that SSO does not re-sync automatically after changing your Windows password. This is because Windows unregisters a dll file, which is not correctly re-registered after the Feature update. If you believe you have been affected by this problem, then please upgrade to ESET Endpoint Encryption version 5.0.0 or later and then follow the password recovery steps as before and login to Windows manually to allow SSO to re-sync automatically.

See: KB203 - How to upgrade ESET Endpoint Encryption (managed)

 

Important note: The password does not resynchronise when Proxy Sync has been clicked.

keywords: sso out of sync recover synchronization synchronisation deslock resync 


We use cookies on our website to enhance your browsing experience. Read more