Agent communication fails when cabundle.cer and cabundle.cer.bak are corrupted
Last Modified: 2022-08-09 08:44:44 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Agent communication fails when cabundle.cer and cabundle.cer.bak are corrupted
Technical Articles ID:
KB93584
Last Modified: 2022-08-09 08:44:44 Etc/GMT Environment
McAfee Agent (MA) 5.6.x
Problem
Agent to Server communication fails on a few systems. On the problem system, the following MA files are corrupted and are shown as NULL bytes:
[Stack Trace START] curl text 25 Closing connection 46678 ] curl text 111 error setting certificate verify locations: CAfile: C:\ProgramData\McAfee\Agent\\cabundle.cer CApath: none ] curl text 77 Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH ] curl text 24 ALPN, offering http/1.1 ] .. [Stack Trace END] Cause
The issue is seen after your Windows system has shut down abruptly. The MA data and certificate information are lost when overwritten with NULL bytes. The MA uses the Solution
The issue is resolved with MA 5.7.0. Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.
Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.
NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products. Affected ProductsLanguages:This article is available in the following languages: |
|