Use the following workaround.
Automatic steps for ePolicy Prchestrator (ePO)-managed systems
Only an ePO administrator can perform these steps.
Solidcore Rules
- Download and extract the Trellix Publisher rule groups file attached to this article.
- Go to Configuration, Solidcore Rules.
- Click Import.
- Select the previously extracted Trellix Publisher rule groups XML file and choose the Overwrite duplicate groups option.
- Click OK.
- After import, examine the server task log and verify that the import is successful.
- Use an existing (or create) a server task "Solidcore: Rule Group Sanity Check" and verify the results.
Application Control Rules (Windows) - Trellix Application (Trellix Default)
If any endpoint has the Trellix Applications (Trellix Default) policy assigned, force the policy update on that endpoint using the
Wake Up Agents button.
Application Control Rules (Windows) - Custom policy
- If any endpoint has assigned any custom policy that contains the Trellix Publisher rule group, force a policy update on that endpoint using the Wake Up Agents button.
- Suppose that an endpoint has assigned any custom policy. If the Trellix applications default policy or Trellix Publisher rule group isn't assigned to any policy, then:
- Add the Trellix Publisher rule group to your Custom Policy.
- Apply these policies to the endpoints.
To apply to systems with
Standalone Installations of Application Control only:
- Download and save the archive that's attached to this article.
- To put ACC in Update mode, run the command sadmin bu.
- Place the certificate files into the directory C:\Program Files\McAfee\Solidcore\Certificates.
- Register the certificate files by running the following commands:
sadmin cert add -u "C:\Program Files\McAfee\Solidcore\Certificates\McAfeeLLC.SHA1.cer"
sadmin cert add -u "C:\Program Files\McAfee\Solidcore\Certificates\McAfeeLLC.SHA256.cer"
sadmin cert add "C:\Program Files\McAfee\Solidcore\Certificates\McAfeeINC.SHA1.cer"
sadmin cert add "C:\Program Files\McAfee\Solidcore\Certificates\McAfeeINC.SHA256.cer"
sadmin cert add -u "C:\Program Files\McAfee\Solidcore\Certificates\McafeeSectigo2021.cer"
- Run the command sadmin cert list and see if the certificate files are registered successfully.
- Switch Application Control back into Enable mode by running the command sadmin eu.
