cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Report Inappropriate Content
Message 1 of 7

Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

Hi There,

I'm doing POC testing for my customer, my customer prepared 2 Win7 32bit enterprise and a Win10 1909 machines for the initial testing, but all of the 3 machines are encountering installation failure issue, below are the details:

application control 8.2.1.435/ePO 5.10/agent 5.6.3/Symantec Endpoint Protection

We suspect it was some conflict between SEP and application control, on the win10 machine, we uninstalled SEP and completely uninstalled agent and application control by using McAfee removal tool, then manually install application control again and it succeeds.

We do the same on the 2 win7 machines,  but unfortunately it was not working. also found kb87647, not working as well..

Logs attached. 

Some screenshots here:

Snipaste_2020-03-03_16-14-29.png

 

Thx in advance.

1 Solution

Accepted Solutions
Former Member
Not applicable
Report Inappropriate Content
Message 3 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

Hi @Former Member 

Thanks for posting on the Community and sharing the logs!
From the Solidcore Installer Log we can see:
McAfee Solidifier:3-3-2020:14:46:33: mpt installing base cmd is = "C:\Users\ADMINI~1\AppData\Local\Temp\{432DB9E4-6388-432F-9ADB-61E8782F4593}\mpt_install_base\x86\mfehidin.exe" -install -desc:MAC_MPT -guid:{3CE6DA78-2636-4668-8CBB-E0E12725D1B9} -log:C:\Windows\mac_mpt.log -etl:C:\Windows\mac_mpt.etl
McAfee Solidifier:3-3-2020:14:46:49: Error running mfehidin. Error code: -1
InstallShield 14:46:49: Returning script function result
InstallShield 14:46:49: CallScriptFunctionFromMsiCA() ends, result 0x643
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1037) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1036) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1035) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1034) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1033) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1032) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1031) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1030) of type 790531 for thread 4736
CustomAction ca_inst_action_FreshInstall returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 14:46:49: InstallFinalize. Return value 3.

> so it is failing installing our core kernel drivers, and it's pointing us to the mac_mpt.log


Looking at that log file we can see:
[16:24:18:384] - Code [0x60001100] : A required certificate couldn't be located in certificate store.

[16:24:18:384] - Total 1 Error Value present
[16:24:18:384] - Code [0x20003041] : Error while stopping McAfee service.

[16:24:18:388] - Warning: Certificate UTN-USERFirst-Object - not found in Root.
[16:24:18:390] - Warning: Certificate GlobalSign Root CA - R1 - not found in Root.


This points us to the reason for failure which is missing root certificates on the endpoint. Please install the root certificates we depend on and run the installation again: https://kc.mcafee.com/corporate/index?page=content&id=KB91697

View solution in original post

6 Replies
Former Member
Not applicable
Report Inappropriate Content
Message 2 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

logs

Former Member
Not applicable
Report Inappropriate Content
Message 3 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

Hi @Former Member 

Thanks for posting on the Community and sharing the logs!
From the Solidcore Installer Log we can see:
McAfee Solidifier:3-3-2020:14:46:33: mpt installing base cmd is = "C:\Users\ADMINI~1\AppData\Local\Temp\{432DB9E4-6388-432F-9ADB-61E8782F4593}\mpt_install_base\x86\mfehidin.exe" -install -desc:MAC_MPT -guid:{3CE6DA78-2636-4668-8CBB-E0E12725D1B9} -log:C:\Windows\mac_mpt.log -etl:C:\Windows\mac_mpt.etl
McAfee Solidifier:3-3-2020:14:46:49: Error running mfehidin. Error code: -1
InstallShield 14:46:49: Returning script function result
InstallShield 14:46:49: CallScriptFunctionFromMsiCA() ends, result 0x643
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1037) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1036) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1035) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1034) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1033) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1032) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1031) of type 790531 for thread 4736
MSI (s) (08!80) [14:46:49:406]: Leaked MSIHANDLE (1030) of type 790531 for thread 4736
CustomAction ca_inst_action_FreshInstall returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 14:46:49: InstallFinalize. Return value 3.

> so it is failing installing our core kernel drivers, and it's pointing us to the mac_mpt.log


Looking at that log file we can see:
[16:24:18:384] - Code [0x60001100] : A required certificate couldn't be located in certificate store.

[16:24:18:384] - Total 1 Error Value present
[16:24:18:384] - Code [0x20003041] : Error while stopping McAfee service.

[16:24:18:388] - Warning: Certificate UTN-USERFirst-Object - not found in Root.
[16:24:18:390] - Warning: Certificate GlobalSign Root CA - R1 - not found in Root.


This points us to the reason for failure which is missing root certificates on the endpoint. Please install the root certificates we depend on and run the installation again: https://kc.mcafee.com/corporate/index?page=content&id=KB91697

View solution in original post

Former Member
Not applicable
Report Inappropriate Content
Message 4 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

And just to add as well - there is a compatibility issue between us and Symantec Endpoint Protection which does lead to install failures: https://kc.mcafee.com/corporate/index?page=content&id=KB91773

Former Member
Not applicable
Report Inappropriate Content
Message 5 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

@Former Member  ,

Thanks for your helping here, actually i was able to find the same error/kb as you pointed out, but what i'm not sure is, when looking at the win7 in my lab, I didnt find those root certificates listed but application contron 8.2.1 was actually installed successfully in my win7 lab. I'm a little bit dont know how to explain this, much appreciated if you can provide a bit details on this part..

Former Member
Not applicable
Report Inappropriate Content
Message 6 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

Hi @Former Member 

The logs would probably explain why it was successful on the other machine - because the installer looks for those certs as a prerequisite. We rely on those amongst other things for our trust validation processes.

I can tell you with certainty from the logs you submitted, the reason the installation is failing is because of the lack of these certs.

Sorry, this isn't the answer you were looking for. At the end of the day each system is different and therefore will react differently.

AdithyanT
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 7

Re: Application Control installation issue on 2 Win7 enterprise: fatal error during installation

Jump to solution

Hi @Former Member,

One possible reason is that the Root Certificate updation could be locked in the machine with issue via Group Policy, however in your lab machine that may not be the case! Can you check the same?

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community