Deployment fails when the McAfee Agent repository policy isn't enabled
Last Modified: 2023-07-11 09:04:15 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Deployment fails when the McAfee Agent repository policy isn't enabled
Technical Articles ID:
KB94862
Last Modified: 2023-07-11 09:04:15 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.x McAfee Agent (MA) 5.x Problem
The errors below are recorded in the (Default location 2021-08-26 12:50:30.741 masvc(3648.4404) scheduler.Info: The task DLP Deployment TEST becomes active 2021-08-26 12:50:30.866 masvc(3648.4404) Updater.Info: Received updater request initiator_type=4 request_type=0 taskid=45. 2021-08-26 12:50:30.866 masvc(3648.4404) Updater.Info: Creating scheduled task updater request, task id = 45. 2021-08-26 12:50:30.866 masvc(3648.4404) Updater.Info: Adding the updater request taskid <45> in the queue. 2021-08-26 12:50:30.881 masvc(3648.4404) reporank.Info: Policy change as got from Configurator <0> 2021-08-26 12:50:31.881 masvc(3648.4404) Updater.Info: Invoking mue as, [C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe -script C:\ProgramData\McAfee\Agent\update\InstallMain.McS -id 32494 -localeid 0409 -logfile C:\ProgramData\McAfee\Agent\logs\McScript_deploy -parent FRAMEWORK -initiator 4 -installdir C:\Program Files\McAfee\Agent\\x86\ -taskid 45 (null) ]. 2021-08-26 12:50:31.881 masvc(3648.4404) Updater.Info: Updater engine is spawned successfully. 2021-08-26 12:50:31.881 masvc(3648.4404) Updater.Info: Creating mue event handler. 2021-08-26 12:50:31.881 masvc(3648.4404) Updater.Info: Created mue event handler. 2021-08-26 12:50:31.881 masvc(3648.4404) Updater.Info: Launched updater engine successfully. 2021-08-26 12:50:31.881 masvc(3648.4404) Updater.Info: Updater session started for initiator type=4, task id = <45>. 2021-08-26 12:50:32.178 masvc(3648.4404) msgbus.Info: QueryFullProcessImageName C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe 2021-08-26 12:50:32.194 masvc(3648.4404) msgbus.Info: verify code signature returns <0>, GetLastError <0>. 2021-08-26 12:50:32.194 masvc(3648.4404) msgbus.Info: Adding <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe>:<6388> auth info reference 2021-08-26 12:50:32.256 masvc(3648.4404) msgbus.Info: executable <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <GlobalSign CodeSigning CA - G3> 2021-08-26 12:50:32.256 masvc(3648.4404) msgbus.Info: Allowing <6388> onto msgbus 2021-08-26 12:50:32.334 masvc(3648.4404) ioservice.Info: IO service received the message. 2021-08-26 12:50:32.365 masvc(3648.4404) compatservice.Info: Received notifications for changes on backcompat watcher 2021-08-26 12:50:32.365 masvc(3648.4404) compatservice.Info: is_compat_running: 1, is_compat_required: 1 2021-08-26 12:50:32.365 masvc(3648.4404) Updater.Info: Received deployment status 2021-08-26 12:50:32.428 masvc(3648.4404) compatservice.Info: Received notifications for changes on backcompat watcher 2021-08-26 12:50:32.428 masvc(3648.4404) compatservice.Info: is_compat_running: 1, is_compat_required: 1 2021-08-26 12:50:32.443 masvc(3648.4404) ioservice.Info: IO service received the message. 2021-08-26 12:50:32.443 masvc(3648.4404) Updater.Info: Script Event : EID:0, Sev:0, ProductId:EPOAGENT3000, Locale:0409, Type:N/A, State:4, Error:26, NewVersion:N/A, Date:N/A, Message: 2021-08-26 12:50:32.443 masvc(3648.4404) Updater.Info: Script Event msg iEventId "0" iSeverity "0" iProductId "EPOAGENT3000" iLocale "0409" iUpdateType "N/A" iUpdateState "4" iUpdateError "26" iNewVersion "N/A" iDateTime "N/A" iCustomMessage "" 2021-08-26 12:50:32.443 masvc(3648.4404) compatservice.Info: Received notifications for changes on backcompat watcher 2021-08-26 12:50:32.443 masvc(3648.4404) compatservice.Info: is_compat_running: 1, is_compat_required: 1 2021-08-26 12:50:32.443 masvc(3648.4404) Updater.Info: Received deployment status 2021-08-26 12:50:37.635 masvc(3648.4404) Updater.Info: Updater engine exited with exit status as 1 and term signal 0. 2021-08-26 12:50:38.655 masvc(3648.4404) scheduler.Info: The task DLP Deployment TEST has failed 2021-08-26 12:50:38.717 masvc(3648.4404) scheduler.Info: Scheduler: Task [DLP Deployment TEST] is finished 2021-08-26 12:50:38.796 masvc(3648.4404) scheduler.Info: The task DLP Deployment TEST is freed NOTE: The task above started and failed within two seconds, which indicates that the system couldn't connect to a source repository. (Default location I #6328 SutDnWtch Successfully set up shutdown watch I #3484 MueEep Initializing MUE EEP Script ID = 32494 NOTE: The lines above show task ID 45 checking in
I #3484 mue products are compatible. NOTE: The lines above confirm that there's no incompatibility with the other Trellix products in the system.
I #3484 creposi Repository ePO_Handler is not usable for the current update session. I #3484 creposi Repository ePO_RGC-EPO is not usable for the current update session. NOTE: The error above shows that the ePO and Agent Handler aren't usable for this session. The McAfee Agent, Repository policy under Repositories shows how the ePO and respective repositories are in a disabled (Enabled="0") state. Examples: <Repository Name="ePO_RGC-EPO" RepoType="1" UrlType="4" NameSpace="0" ProxyUsage="0" AuthType="0" Enabled="0" ServerFQDN="RGC-EPO" ServerIP="20.1.2.10" ServerName="RGC-EPO" Port="80" SSLPort="443" Path="Software" IsPasswordEncrypted PingTime="30001" SubnetDistance="15" SitelistOrder="2" State="3" /> Cause
The errors point to a configuration issue that prevents the system from connecting to a valid repository.
Solution
Update the MA Repository policy. Select the needed ePO Server and Agent Handlers, and change the status to Enable. To update the MA policy, perform the steps below:
Affected ProductsLanguages:This article is available in the following languages: |
|