"hh:mm:ss:ms - EsConfigTool util:- Preserve Settings returned" error seen when upgrading from Endpoint Security 10.6.1 to 10.7 September 2023 release or later

Technical Articles ID: KB96772
Last Modified: 2023-10-03 10:42:40 Etc/GMT

Environment

Endpoint Security (ENS) 10.6.1

Summary

Recent updates to this article

Date	Update
October 3, 2023	Minor formatting updates; no content changes.

With the release of ENS 10.7 September 2023, Trellix has removed the end of life (EOL) Visual C++ Redistributable 2010 binaries from the product installer.

If you're yet to update to ENS 10.7 in preparation for the EOL of ENS 10.6.1 on December 31, 2023, this article will explain the process to avoid any potential issues that can arise from the removal of the Visual C++ Redistributable 2010 from the installer package.

Problem 1

After you upgrade to the ENS September 2023 release or later, you see that the Adaptive Threat Protection (ATP) and Firewall (FW) settings aren't preserved.

You see the following error in the ATP or FW module installation logs:

hh:mm:ss:ms - EsConfigTool util:- Preserve Settings returned : 4294967295

Additionally, you see that the McAfee process crashes on Hosts running Windows 8.1 or Server 2012, if you configure the operating system to produce crash dumps.

You see dumps created for the following processes:

mfetp.exe
mfeatp.exe
atpconfigtool.exe
MpCmdRun.exe
WscAVExe.exe
FwWindowsFirewallHandler.exe

IMPORTANT: You can safely ignore these process crashes and delete the dump files post-upgrade.

System Change

You upgraded ENS 10.6.1 to ENS 10.7 September 2023 or later.

Cause

The settings preservation routines for ENS 10.6.1 have a dependency on the removed Visual C++ Redistributable 2010 binaries. While the upgrade is successful, the routine to preserve the settings for ATP and FW aren't.

IMPORTANT: You can safely ignore the McAfee process crashes on Windows 8.1 and Server 2012 and delete the dump files post-upgrade.

Solution 1

ePO managed:

For ePO-managed systems, clients will receive policy settings on policy enforcement.

Clients that require specific Firewall settings to connect to their ePO Agent Handler such as over VPN should pre-configure Firewall settings in the deployment packages using the ENS Package Designer tool to ensure communication isn't interrupted.

For more information about the ENS Package Designer, see section "Deploy custom Trellix ENS 10.7.x installation packages generated by Trellix ENS Package Designer 10.7.x" in the Endpoint Security Installation Guide in the Documentation Portal.

Solution 2

Standalone:
For standalone installations, we recommend removing the existing ENS 10.6.1 installation prior to updating to ENS 10.7 September 2023 or later release.

Alternatively, use the ENS Package Designer to pre-configure settings prior to upgrading, or the ESConfigtool to export the policies from a client already running ENS 10.7 and import these to the client post-upgrade from version 10.6.1.

For more information about the ENS Package Designer, see section "Deploy custom Trellix ENS 10.7.x installation packages generated by Trellix ENS Package Designer 10.7.x" of the Endpoint Security Installation Guide in the Documentation Portal.

For more information about ESConfigtool, see section "Create a custom settings file to import during command-line installation" of the Endpoint Security Installation Guide in the Documentation Portal.

Solution 3

Upgrade to the ENS 10.7 April 2023 release or earlier, and then perform the upgrade to the ENS 10.7 September 2023 release or later.

Workaround

If this solution or workaround does not resolve your issue, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

"hh:mm:ss:ms - EsConfigTool util:- Preserve Settings returned" error seen when upgrading from Endpoint Security 10.6.1 to 10.7 September 2023 release or later

Environment

Summary

Problem 1

System Change

Cause

Solution 1

Solution 2

Solution 3

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

"hh:mm:ss:ms - EsConfigTool util:- Preserve Settings returned" error seen when upgrading from Endpoint Security 10.6.1 to 10.7 September 2023 release or later

Environment

Summary

Problem 1

System Change

Cause

Solution 1

Solution 2

Solution 3

Workaround

Affected Products

Languages:

Choose your region

Title

Title