Windows disallows the installation of the Network Driver Interface Specification (NDIS)
Lite Filter Driver
mfelnfk.sys during product installation. All products listed in the Environment section of this article require the
mfenlfk.sys driver.
The
hr=e0000247 return code found in the
VSCore installation log uniquely identifies this issue.
From the
McAfee_VSCore_Install_All_<timestamp>
.log:
[17:03:15:128] - ERROR: Failed to copy inf file C:\ProgramData\McAfee\Agent\Evaluation\ENDP_GS_1060\Install\0000\x64\mfenlfk.inf, err=3758096967
[17:03:15:128] - Failed to copy inf file, hr=e0000247
[17:03:15:128] - WARNING: Could not open BehaviorBlocking key
[17:03:15:128] - Lock Service DACL mfenlfk
[17:03:15:129] - InstallCustomDriver failed
[17:03:15:129] - ERROR: parseDriver: failed
[17:03:15:129] - Verifying Mfenlfk.sys is installed and running...
[17:03:15:129] - GetDriverService mfenlfk.sys
[17:03:15:129] - ERROR: Could not open mfenlfk.sys service. GetLastError()=1060
[17:03:15:129] - mfenlfk.sys service is not running.
[17:03:15:974] - Install error: un-winding install
An example from a failed Endpoint Security installation in the
McAfee_Common_Bootstrapper_<timestamp>
.log:
23/10/2018 17:03:02.418 [9140] [BootstrapperMain] Found Install ALL cab file
23/10/2018 17:03:02.422 [9140] [BootstrapperMain] Copied from C:\ProgramData\McAfee\Agent\Evaluation\ENDP_GS_1060\Install\0000\\mfehidin64.exe to C:\ProgramData\McAfee\Agent\Evaluation\ENDP_GS_1060\Install\0000\\mfehidin.exe
23/10/2018 17:03:02.423 [9140] [BootstrapperMain] "C:\ProgramData\McAfee\Agent\Evaluation\ENDP_GS_1060\Install\0000\\mfehidin.exe" -installcab:"vscore_all.cab" -guid:{EA334ECD-7513-486B-A265-0C698FACBB06} -log:"C:\WINDOWS\TEMP\\McAfeeLogs\McAfee_Common_VSCore_Install_All_23102018170302419.log" -etl:"C:\WINDOWS\TEMP\\McAfeeLogs\McAfee_Common_VSCore_Install_All_23102018170302419.etl"
23/10/2018 17:03:02.424 [9140] [BootstrapperMain] RunCommandLine: "C:\ProgramData\McAfee\Agent\Evaluation\ENDP_GS_1060\Install\0000\\mfehidin.exe" -installcab:"vscore_all.cab" -guid:{EA334ECD-7513-486B-A265-0C698FACBB06} -log:"C:\WINDOWS\TEMP\\McAfeeLogs\McAfee_Common_VSCore_Install_All_23102018170302419.log" -etl:"C:\WINDOWS\TEMP\\McAfeeLogs\McAfee_Common_VSCore_Install_All_23102018170302419.etl"
23/10/2018 17:03:22.371 [9140] [BootstrapperMain] RunCommandLine: Process return code : 4294967295
23/10/2018 17:03:22.372 [9140] [BootstrapperMain] VSCore Installation Return value : 4294967295
23/10/2018 17:03:22.373 [9140] [BootstrapperMain] VSCore Installation failed!!
Additional information about the certificate action can be found at
c:\windows\inf\setupapi.dev.log:
>>> [SetupCopyOEMInf - C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.inf]
>>> Section start 2018/10/26 10:02:36.109
cmd: "C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\\mfehidin.exe" -installcab:"vscore_all.cab" -guid:{EA334ECD-7513-486B-A265-0C698FACBB06} -log:"C:\WINDOWS\TEMP\\McAfeeLogs\McAfee_Common_VSCore_Install_All_2610201810022376.log" -etl:"C:\WINDOWS\TEMP\\McAfeeLogs\McAfee_Common_VSCore_Install_All_2610201810022376.etl"
inf: Copy style: 0x00000000
sto: {Setup Import Driver Package: C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.inf} 10:02:36.124
inf: Provider: McAfee, Inc.
inf: Class GUID: {4D36E974-E325-11CE-BFC1-08002BE10318}
inf: Driver Version: 01/01/2017,14.2.0.611
inf: Catalog File: mfenlfk.cat
pol: {Driver package policy check} 10:02:36.249
pol: {Driver package policy check - exit(0x00000000)} 10:02:36.249
sto: {Stage Driver Package: C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.inf} 10:02:36.249
inf: {Query Configurability: C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.inf} 10:02:36.265
inf: Driver package 'mfenlfk.inf' is configurable.
inf: {Query Configurability: exit(0x00000000)} 10:02:36.265
flq: Copying 'C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.cat' to 'C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.cat'.
flq: Copying 'C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.inf' to 'C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.inf'.
flq: Copying 'C:\ProgramData\McAfee\Agent\Current\ENDP_GS_1050\Install\0000\x64\mfenlfk.sys' to 'C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.sys'.
sto: {DRIVERSTORE IMPORT VALIDATE} 10:02:36.281
sig: {_VERIFY_FILE_SIGNATURE} 10:02:36.312
sig: Key = mfenlfk.inf
sig: FilePath = C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.inf
sig: Catalog = C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.cat
! sig: Verifying file against specific (valid) catalog failed.
! sig: Error 0x800b010c: A certificate was explicitly revoked by its issuer.
sig: {_VERIFY_FILE_SIGNATURE exit(0x800b010c)} 10:02:36.312
sig: {_VERIFY_FILE_SIGNATURE} 10:02:36.312
sig: Key = mfenlfk.inf
sig: FilePath = C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.inf
sig: Catalog = C:\WINDOWS\System32\DriverStore\Temp\{b1b06d34-6ba1-6e47-b5c3-793c0f2976b1}\mfenlfk.cat
! sig: Verifying file against specific Authenticode(tm) catalog failed.
! sig: Error 0x800b010c: A certificate was explicitly revoked by its issuer.
sig: {_VERIFY_FILE_SIGNATURE exit(0x800b010c)} 10:02:36.328
!!! sig: An unexpected error occurred while validating driver package. Catalog = mfenlfk.cat, Error = 0x800B010C
!!! sig: Driver package is considered unsigned, and Code Integrity is enforced.
!!! sig: Driver package failed signature validation. Error = 0xE0000247
sto: {DRIVERSTORE IMPORT VALIDATE: exit(0xe0000247)} 10:02:36.328
!!! sig: Driver package failed signature verification. Error = 0xE0000247
!!! sto: Failed to import driver package into Driver Store. Error = 0xE0000247
sto: {Stage Driver Package: exit(0xe0000247)} 10:02:36.343
sto: {Setup Import Driver Package - exit (0xe0000247)} 10:02:36.343
!!! inf: Failed to import driver package into driver store
!!! inf: Error 0xe0000247: A problem was encountered while attempting to add the driver to the store.
<<< Section end 2018/10/26 10:02:36.546
<<< [Exit status: FAILURE(0xe0000247)]
