The update logs within the Sophos client give the following: "There was a problem while establishing a connection to the server. A windows API call returned error 1311" After lots of googling, we can find nothing relating to "error 1311". The primary update server (mgmt1) is configured the same on all machines through 1 Sophos policy. Why can the clients update successfully from mgmt1 but mgmt1 cannot connect to itself and update properly? "The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years.
I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing.
Updates are copied manually on to the mgmt1 server from CD.Putting the server online is not an option and therefore the Sophos servers are not an option for providing updates. When the "Check for updates..." option is clicked, the dialogue box displays that it cannot connect to server (depsite the server being itself and all other machines configured in the same way work).By far the worst thing about Sophos 8 was the EM Library.It was niggly and tricky and if it did not work properly it would freeze all the data on your console.Sophos Update Manager , a software developed by Sophos Limited, often gets into your computer via Webpage browse or some freeware’s installation. If you recklessly delete whatever you consider redundant, undesirable effects may show up one after another, such as: Sophos Update Manager program is developed by the company named Sophos Limited. The default uninstaller of the program is Msi /X ,the program is also popular in the countries of Germany and India.
To safely remove the program, the wrong way is to locate its folder, right-click it and select “Delete”, while quite a number of people are still doing this. (“X” stands for the hard drive you install Sophos Update Manager on.) You may not notice there would still be leftovers of Sophos Update Manager, for example, some read-only files automatically kept by the system or its registry entries, staying right in your drive, even if you have gone through correct process via Control Panel or its default uninstaller.
It is required you to carefully remove related items in Registry Editor to accomplish the job, which is risky in some degree.
Things could get worse if you mistakenly delete those needed by system running.
If you choose an HTTP URL or a share that is not maintained by a managed Update Manager, Enterprise Console cannot check that the specified software subscription is available.
You must manually ensure that the share contains the specified software subscription, otherwise computers will not be updated.
The advice here is to set "Obfuscated Password" to 0 and then secure the key such that only Administrators and System have access.