To address this issue, re-create the missing registry key with a unique value:
CAUTION: This article contains information about opening or modifying the registry.
- The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
- Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see the Microsoft Windows registry information for advanced users article.
- Do not run a REG file that is not confirmed to be a genuine registry import file.
- Log on to the server that hosts ePO with an account that has local administrator permissions.
- Open a command prompt as an administrator
- Press Windows+R, type regedit into the field and press Enter.
- In the Start Search field, type cmd, and then press Ctrl+Shift+Enter.
- If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
- Stop the ePO Application Server service:
- Press Windows+R.
- Type services.msc and press Enter.
- Right-click ePolicy Orchestrator #.#.# Application Server, and select Stop.
- Close the services window.
- To generate a unique value for the missing registry key and note the value it generates, run the following command:
NOTE: The following command assumes that ePO is installed in the default path. If it's not, you need to adjust the paths in the command to be directed to the ePO install folder.
"C:\Program Files (x86)\McAfee\ePolicy Orchestrator\JRE\bin\java.exe" -Duser.language=en -Duser.country=US -classpath "C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\Core\lib\orion-core-common.jar" com.mcafee.orion.core.install.DbKeyGenerator
- Access the registry on the ePO server.
- Navigate to the following Hive:
HKEY_LOCAL_MACHINE\Software\Wow6432node\Network Associates\ePolicy Orchestrator\Secured
- Create a REG_SZ key named InstallKey.
- Place the string you generated in Step 3 above into the registry key you created.
- Start the ePO Application Server service:
- Press Windows+R.
- Type services.msc and press Enter.
- Right-click ePolicy Orchestrator #.#.# Application Server, and click Start.
- Close the services window.
- Log on to your ePO console using the following URL and replace the port number with your port number if you're not using the default port (8443):
https://localhost:8443/core/config
- Confirm your database password.
- Confirm that the password works through the Test Connection button, and then click Apply if the connection is successful.
After you complete these steps, the upgrade no longer fails with a "javax.crypto.BadPaddingException" message.
