Agent communication fails when cabundle.cer and cabundle.cer.bak are corrupted
Last Modified: 2022-08-09 08:44:44 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Agent communication fails when cabundle.cer and cabundle.cer.bak are corrupted
Technical Articles ID:
KB93584
Last Modified: 2022-08-09 08:44:44 Etc/GMT Environment
McAfee Agent (MA) 5.6.x
Problem
Agent to Server communication fails on a few systems. On the problem system, the following MA files are corrupted and are shown as NULL bytes:
[Stack Trace START] curl text 25 Closing connection 46678 ] curl text 111 error setting certificate verify locations: CAfile: C:\ProgramData\McAfee\Agent\\cabundle.cer CApath: none ] curl text 77 Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH ] curl text 24 ALPN, offering http/1.1 ] .. [Stack Trace END] Cause
The issue is seen after your Windows system has shut down abruptly. The MA data and certificate information are lost when overwritten with NULL bytes. The MA uses the Solution
The issue is resolved with MA 5.7.0. Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.
Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.
NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products. Affected ProductsLanguages:This article is available in the following languages: |
|