Recent updates to this article
Date |
Update |
August 4, 2023 |
Updated redirect end date and ePO version upgrade details for lc.mcafee.com URL change. |
June 1, 2023 |
Updated details related to the ePO 5.10 Service Pack 1 Update 3 release that addresses the URL change from lc.mcafee.com to lc.trellix.com. |
This article outlines upcoming changes to the URLs that ePO on-premises uses. All future references to ePO on-premises in this article will be shortened to ePO. For information about our rebranding efforts and URL changes for other products, see
KB95499 - REGISTERED - Trellix solutions rebranding.
The following URLs that ePO uses will be moving to URLs on the Trellix domain.
NOTE: This article documents all URL changes related to ePO on-premises. If the URL isn't listed in the following table, it means that the URL isn't changing in the near future. This article doesn't include the URLs used by the extensions checked in to ePO.
URL Change |
New IP Address |
URL Redirect Ends |
Related Feature |
Impact |
Action |
https://epo.mcafee.com
changed to
https://epo.trellix.com |
136.179.57.116 |
December 31, 2022 |
Software Catalog |
- Unable to update the software catalog or PCL.
- TA Safe Install feature fails to update PCL.
|
- Apply Update 15 or later.
- Upgrade the TA extension to 5.7.8.
- Allow new URL through firewall.
|
https://s-download.mcafee.com
changed to
https://s-download.trellix.com |
Dynamic |
October 24, 2022 (no redirect) |
Software Catalog |
Unable to download software from the software catalog. |
Allow new URL through firewall. |
https://lc.mcafee.com
changed to
https://lc.trellix.com
|
136.179.57.115 |
September 30, 2024 |
Repository Pull |
Unable to complete a repository pull. |
- Upgrade to ePO 5.10 Service Pack 1 Update 2 when it's available.
- Allow the new URL through the firewall.
|
All ePO servers have started using
https://s-download.trellix.com from October 24, 2022, and no code change or configuration change is needed on the ePO server. For the other two URLs, the change must be made on your ePO server; however, ePO doesn't currently allow you to easily change these URLs. The ePO 5.10 Update 15 package and TA 5.7.8 extension both use the new software catalog URL (epo.trellix.com). You
do not have to upgrade endpoints to TA 5.7.8; only the extension update is required. The TA extension change is required for the
Safe Install feature to continue to work after December 31, 2022. The Safe Install feature is documented in the
TA Product Guide. The ePO 5.10 Service Pack 1 Update 2 (SP1CU2) release uses the new lc.trellix.com URL. The release date for SP1CU2 is
not determined yet.
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
WARNING: If you're on ePO 5.10 Update 10 or earlier, haven't gone through the SHA migration, and your ePO server is still using a 1024-bit certificate, you need to complete the SHA migration before upgrading to ePO 5.10 Update 14 or later. For more details, see
KB95019 - Agent-to-server communication fails after applying ePolicy Orchestrator 5.10 Update 11. If you're using ePO 5.10 Update 10 or earlier, we recommend that you open Certificate Manager and confirm that your ePO server is using 2048-bit keys. If not, start the certificate migration process immediately in preparation for the ePO 5.10 Update 14 or later.
Instructions to verify that your ePO server is using a 2048-bit certificate:
- Log on to the ePO console.
- Go to Menu, Configuration, Certificate Manager.
- Note the value in the Key Size field for both the Root Certificate and the Product: Agent Handler sections. If either section shows a 1024-bit key, you need to migrate certificates. The certificate migration process is outlined in KB87017 - Migration from SHA-1 to SHA-2 certificates is needed after upgrading to ePolicy Orchestrator.
URL change instructions for Software Catalog:
The recommended solution is to upgrade to ePO 5.10 Update 15, which automatically changes both old URLs to the new Trellix URLs. If for some reason you can't apply ePO 5.10 Update 15 before the URL redirect ends, you can follow the instructions below in older versions of ePO to change the URL ePO uses for
epo.mcafee.com. The following procedure doesn't explain how you change the URL for
lc.mcafee.com; but, that URL will have a redirect in place until September 30, 2024.
- Open a browser on your ePO server. Type https://epo.trellix.com/ProductCompatibilityList.xml in the field and press Enter.
- Check if the Product Compatibility List (PCL) is now displayed. If the PCL doesn't display, contact your network team to confirm that the ePO server is allowed to make an outbound connection to epo.trellix.com. You might need to add the IP address or new URL to your network firewall or proxy server's allow list.
WARNING: Don't continue until you can view the PCL using the new URL on your ePO server. Doing so can break the ePO software catalog functionality.
- Open SQL Management Studio and connect to the primary ePO database. For detailed instructions, see KB67591 - How to run a SQL script provided by Technical Support against the ePolicy Orchestrator.
- Run the following script against the primary ePO database:
Update EPOSoftwareCatalogServer SET ServerName='epo.trellix.com', Port=443, debugFlags = 0, useSSL = 1
NOTE: Your ePO server will now use the new URL. No service restart is needed.
- Log on to the ePO server.
- Go to Menu, Software, Software Catalog.
- Click the refresh icon in the upper-left corner of the screen.
- Wait for the refresh to complete and confirm that the icon has a green check. If anything else is indicated, the software catalog fails to download the PCL.
How to revert the ePO Software Catalog to the original URL:
If your software catalog stops working after going through the previous steps and the current date is prior to December 31, 2022, you can roll back to the previous URL by repeating the previous steps and use the below SQL query in step 4:
Update EPOSoftwareCatalogServer SET ServerName='epo.mcafee.com', Port=443, debugFlags = 0, useSSL = 1
After December 31, 2022, the old URL won't work, so rolling back the change won't address the problem.