Unknown User (after using the framepkg.exe /install=agent /forceinstall)

Technical Articles ID: KB79261
Last Modified: 2023-04-17 05:21:36 Etc/GMT

Environment

Drive Encryption (DE) 7.x

Problem

You're unable to successfully authenticate at preboot.

You were previously able to authenticate successfully at preboot. But, suddenly authentication fails after you reinstall the McAfee Agent / Trellix Agent using the following forceinstall switch:

framepkg.exe /install=agent /forceinstall

After running the above command, the client synchronizing with the ePO Server leads to duplicate system entries being present in the ePO database for this client.

Cause

There are several ePO checks to prevent duplicate entries being created in the ePO database. But, this issue occurs when the Matching Detected Systems check is only based on the GUID for these systems.

Solution

On clients with DE installed, don't use the forceinstall switch.

IMPORTANT:

The McAfee Agent /forceinstall switch must not be used unless indicated in a KB article to resolve an issue.
Using the /forceinstall switch as a regular process can cause issues with the McAfee Agent, which leads to duplicate entries in the ePolicy Orchestrator system tree. It might lead to systems getting an incorrect policy assignment.

The standard use case as mentioned in the McAfee Agent product guide is to use the /forceinstall switch only to either:

Change the installation directory
Or
Downgrade the McAfee Agent

Workaround 1

Perform an administrative recovery via Challenge or Response and allow the client to restart.

To perform a challenge and response procedure, see the section "Recovering users and systems" in your DE Product Guide.

IMPORTANT: After the client has restarted and accessed Windows, wait and allow the client to synchronize with ePO. Waiting allows ePO to generate a new Machine Object.

For product documents, go to the Product Documentation portal.

Workaround 2

Perform an Emergency Boot to access the computer. This action requires the recovery file to be authenticated and needs to be exported from ePO using the scripting API.

For instructions about how to perform an emergency boot with the DE Standalone boot disk, see the relevant DE Product Guide.

For product documents, go to the Product Documentation portal.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Unknown User (after using the framepkg.exe /install=agent /forceinstall)

Environment

Problem

Cause

Solution

Workaround 1

Workaround 2

Affected Products

Languages:

Title

Title

Knowledge Center

Unknown User (after using the framepkg.exe /install=agent /forceinstall)

Environment

Problem

Cause

Solution

Workaround 1

Workaround 2

Affected Products

Languages:

Choose your region

Title

Title