Trellix Agent の MsgBus Cert Updater パッケージをバージョン
5.7.7.435 にアップグレードすると、
AMCore の更新が適用されないという問題があります。
masvc<computername>.log ファイルに次のようなメッセージが表示されます:
masvc(5856.6828) msgbus.Info: Adding <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe>:<4728> auth info reference
masvc(5856.6828) msgbus.Info: executable <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <GlobalSign CodeSigning CA - G3>
masvc(5856.6828) msgbus.Info: Allowing <4728> onto msgbus
masvc(5856.6828) compatservice.Info: Received notifications for changes on backcompat watcher
masvc(5856.6828) compatservice.Info: is_compat_running: 1, is_compat_required: 1
masvc(5856.6828) Repository.Error: detect system proxy failed <rc = 12>.
masvc(5856.6828) msgbus.Info: QueryFullProcessImageName C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe
masvc(5856.6828) crypto.Error: verification failed, openssl error 554127477 <error:21075075:PKCS7 routines:PKCS7_verify:certificate verify error>
masvc(5856.6828) crypto.Error: verification failed due to 1.
masvc(5856.6828) msgbus.Error: cms verify failed for sig fd 10, rc 1201
masvc(5856.6828) msgbus.Error: cms verify failed for sig fd 10, rc 1201
masvc(5856.6828) msgbus.Warning: Allowing <C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe(5496)> limited access onto msgbus
The
McScript.log ファイルに次の情報とエラーが記載されます:
#4856 ScrptExe Running "C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe"
/LPCPUID=AMCORE__2000:4728_1674873089:0001
#4856 ScrptExe Executing "C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe"
/LPCPUID=AMCORE__2000:4728_1674873089:0001 /INITEVENT=NOTIFY_INIT_{65D6FFF1-FBF3-4382-BCAA-A129912124E9} /DEINITEVENT=NOTIFY_DEINIT_{0ED7F3E2-7C00-49E6-A3A4-C31FC4F148B2}
#4856 UpdatePlugin Error trace:
#4856 Thread [Main thread]->
#4856 SessMgr [SessionManager::runScript:C:\ProgramData\McAfee\Agent\update\UpdateMain.McS]->
#4856 UpdatePlugin LPCException occurred in MfeUpdatePluginWrapper::setProductInfo()
#4856 ScrptExe Failed to set the product information. Setting SetMcShieldClientdll to FALSE
#4856 ScrptExe Could not deinitialize the process with id - AMCORE__2000:4728_1674873089:0001 as no such process exists
#4856 ScrptExe Executing section: [LatestAlreadyInstalled]
#4856 ScrptMgr Product(s) running the latest AMCore.
#4856 ScrptExe Script executed. Setting dwRet to 0