Client always shows the System State as Inactive (MfeEpe.log: MfeEpeEncryptionInformationServiceClient is currently unavailable)

Technical Articles ID: KB73045
Last Modified: 2023-04-12 07:37:04 Etc/GMT

Environment

Drive Encryption (DE) 7.1.x

For environment information, see KB79422 - Supported platforms for Drive Encryption 7.x.

Problem 1

Some systems fail to activate after installing DE, even though the encryption policy is activated in ePolicy Orchestrator (ePO):

Client side:
The user sees on the client the following in the Encryption System Status window, even though the encryption policy is activated in ePO:

System State	Inactive
Volume Status	No volume information
Progress	Progress bar shows no encryption activity

ePO Console:
The administrator sees the Client System Details showing for DE:

State

In-Active

Clicking on More, Disks shows the following message:

No details available, as Drive Encryption is not Active

Problem 2

You see the following error in the MfeEpe.log file on the client:

ERROR	MeEpeServiceLPCServe	Failed to create initial LPC state: [0xEE000007] Failed to generate lpc passphrase MfeEpeServiceLPCServer Service failed to initialize.
INFO	MfeEpeCredentialProviderServiceV2	Service Started Successfully
WARNING	MfeEpeCredentialProviderServiceV2	..\..\..\Src\Helper\EpePcCredentialProviderServiceHandler.cpp: EPEPC_credential_provider_service_handler::init: 79: [0xEE120008] no system policy set
WARNING	MfeEpeEsEncryptionInformationService	..\..\..\Src\EpeFsmHostErrorHandler.cpp: EPE_fsm_host_error_handler::handle: 71: Received service unavailable exception: The service MfeEpeEncryptionInformationServiceClient is currently unavailable

The first error above indicates that the following registry key is missing as it tries to write to the key.

HKLM\Software\Network Associates\ePolicy Orchestrator\Application Plugins\EEADMIN_1000

The String Value name is: AuthorizationHash

Cause

A lack of permissions prevents the following registry key from being created:

HKLM\Software\Network Associates\ePolicy Orchestrator\Application Plugins\EEADMIN_1000

Solution 1

Log on to the client with an account that has sufficient permissions:

To verify whether this is a permissions issue, log on to the client as a domain administrator.
Restart the McAfee Endpoint Encryption Agent service.
Check the MfeEpe.log file and verify that there are no new 0xEE000007 entries.
(Optional) Make sure that the following registry key has been created after installation is successful:

HKLM\Software\Network Associates\ePolicy Orchestrator\Application Plugins\EEADMIN_1000
Make sure that the Endpoint Encryption status screen has started adding users, PreBoot File System, and so on.

After a number of Agent to Server Communication Intervals, the drive is detected, policies are enforced, and the hard disk encryption is started.

Solution 2

If the above solution doesn't resolve this issue, see this list of other content that covers inactive issues.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Client always shows the System State as Inactive (MfeEpe.log: MfeEpeEncryptionInformationServiceClient is currently unavailable)

Environment

Problem 1

Problem 2

Cause

Solution 1

Solution 2

Affected Products

Languages:

Title

Title

Knowledge Center

Client always shows the System State as Inactive (MfeEpe.log: MfeEpeEncryptionInformationServiceClient is currently unavailable)

Environment

Problem 1

Problem 2

Cause

Solution 1

Solution 2

Affected Products

Languages:

Choose your region

Title

Title