To resolve this issue, perform the following steps for ePO-managed installation:
Extension Prior to 8.3.6
- Download McAfee.zip attached to this article and extract the contents.
- Navigate to Solidcore rules.
- Click Import.
- Provide the path of the XML downloaded in step 1.
- Select the Overwrite duplicate groups option.
- Check the server task log for success and completion of the Import.
- Send the wake up agent on all clients for policy changes to become effective.
Extension 8.3.6
- Download Trellix.zip attached to this article and extract the contents.
- Navigate to Solidcore rules.
- Click Import.
- Provide the path of the XML downloaded in step 1.
- Select the Overwrite duplicate groups option.
- Check the server task log for success and completion of the Import.
- Send the wake up agent on all clients for policy changes to become effective.
Standalone:
- Download StandaloneCert.zip attached to this article and extract the contents.
- If CLI is in lockdown, recover CLI using the following command:
sadmin recover -z <password>
NOTE: Contact the ACC administrator for the password to recover CLI.
- Change Application Control to Update mode and execute the following command:
sadmin bu
- Place the extracted certificates in the folder C:\Program Files\McAfee\Solidcore\Certificates.
- To register the certificate file, run the following command:
sadmin cert add "C:\Program Files\McAfee\Solidcore\Certificates\Musarubra.cer"
sadmin cert add "C:\Program Files\McAfee\Solidcore\Certificates\Musarubra1.cer"
sadmin cert add "C:\Program Files\McAfee\Solidcore\Certificates\ Musarubra_April.cer"
sadmin cert add "C:\Program Files\McAfee\Solidcore\Certificates\ MusarubraDec.cer"
- To verify if the certificate files are registered successfully, run the following command:
sadmin cert list
- Change Application Control back to Enable mode and run the following command:
sadmin eu
- If recovered, lockdown CLI using the command below:
<sadmin lockdown>
