'sadmin' is not recognized'

[glange]

This is a very curious problem that I have seen twice now on my own host. The error 'sadmin' is not recognized as an internal or external command, operable program or batch file occurs when I attempt to manually recover the CLI.. This machine has SolidCore 8.3.0.303 installed in Enable mode. The OS is Windows 10 Workstation build 17763. I wanted to re-solidify a directory after making a change on the machine. The last time I experienced this issue I uninstalled and reinstalled SolidCore and I was able to recover the CLI. I have another host with the same OS, same version of SolidCore and have had no issues in recovering the CLI. What is happening with this?

[ktankink]

Hi @glange The sadmin.exe executable is located in the "C:\Program Files\McAfee\Solidcore\" directory, and your user profile's PATH variable should be set to include that directory, so that you can call 'sadmin.exe' from any directory and it will run.  If the userprofile you're using at command line (or via script) doesn't have that directory in the local PATH variable set, then that error might occur (as it can't find it in the current or any of the %PATH% variable directories).

Run "echo %PATH%" and verify if you see the MACC directories in the list.

---

c:\>echo %PATH%
C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\McAfee\Solidcore\Tools\GatherInfo;C:\Program Files\McAfee\Solidcore\Tools\Scanalyzer;C:\Program Files\McAfee\Solidcore\;C:\Program Files\McAfee\Solidcore\Tools\ScGetCerts

---

If the PATH is not set properly, you'll need to address this, or call out the sadmin.exe using its full path "c:\Program Files\McAfee\Solidcore\sadmin.exe".

[glange]

Hi Kerry, it's good to see you in the Community again.  On my physical host this is what I see:

C:\WINDOWS\system32>echo "%PATH%"
"C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\Tumbleweed\Desktop Validator\;C:\Program Files\Tumbleweed\Desktop Validator\x86;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files (x86)\HID Global\ActivClient\;C:\Program Files\HID Global\ActivClient\;C:\Program Files\McAfee\Solidcore\Tools\GatherInfo;C:\Program Files\McAfee\Solidcore\Tools\Scanalyzer;C:\Program Files\McAfee\Solidcore\;C:\Program Files\McAfee\Solidcore\Tools\ScGetCerts;C:\Users\glange.sa\AppData\Local\Microsoft\WindowsApps"

Checking the SolidCore path reveals this:

C:\Program Files\McAfee\Solidcore>dir
Volume in drive C has no label.
Volume Serial Number is 28FD-DADE

Directory of C:\Program Files\McAfee\Solidcore

06/05/2020 11:40 AM <DIR> .
06/05/2020 11:40 AM <DIR> ..
03/10/2020 02:29 PM 1,109,696 loadsapr.exe
06/09/2020 08:21 AM 350 passwd
03/10/2020 03:04 PM 5,328,648 scinject_x64.dll
03/10/2020 02:09 PM 1,874,080 scormcpl.dll
03/16/2020 01:14 PM 3,505,208 scorsapr.dll
03/10/2020 03:03 PM 7,190,512 scsrvc.exe
6 File(s) 19,008,494 bytes
2 Dir(s) 1,870,222,807,040 bytes free

On my VM the information is as follows:

PATH

C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Tumbleweed\Desktop Validator\;C:\Program Files\Tumbleweed\Desktop Validator\x86;C:\Program Files (x86)\HID Global\ActivClient\;C:\Program Files\HID Global\ActivClient\;C:\Program Files\McAfee\Solidcore\Tools\GatherInfo;C:\Program Files\McAfee\Solidcore\Tools\Scanalyzer;C:\Program Files\McAfee\Solidcore\;C:\Program Files\McAfee\Solidcore\Tools\ScGetCerts;C:\Users\glange.sa\AppData\Local\Microsoft\WindowsApps

Directory of C:\Program Files\McAfee\Solidcore

04/10/2020 04:13 PM <DIR> .
04/10/2020 04:13 PM <DIR> ..
04/10/2020 03:43 PM <DIR> Certificates
03/16/2020 01:13 PM 116,417 finetune.bat
04/10/2020 03:40 PM <DIR> Images
03/10/2020 02:22 PM 1,287,408 InstaConfig.exe
04/10/2020 03:40 PM <DIR> License
03/10/2020 02:29 PM 1,109,696 loadsapr.exe
03/10/2020 03:08 PM 3,573 ma_msgbus_auth.sig
03/10/2020 03:09 PM 307 ma_msgbus_auth.xml
04/10/2020 03:40 PM <DIR> McAfeeCerts
06/09/2020 12:12 AM 350 passwd
03/10/2020 03:01 PM 4,061,008 sadmin.exe
03/10/2020 03:04 PM 5,328,648 scinject_x64.dll
03/10/2020 02:20 PM 1,108,672 scinject_x86.dll
03/10/2020 02:09 PM 1,874,080 scormcpl.dll
03/16/2020 01:14 PM 3,505,208 scorsapr.dll
03/10/2020 03:03 PM 7,190,512 scsrvc.exe
04/10/2020 03:40 PM <DIR> Tools
12 File(s) 25,585,879 bytes
7 Dir(s) 66,443,587,584 bytes free

You can clearly see the differences.  I had experienced this issue before and uninstalled SC, running sadmin ran with no issues.  For whatever reason the path is gone.

[ktankink]

Your %PATH% variable looks fine on both systems, but it looks like on the physical system the C:\Program Files\McAfee\Solidcore\sadmin.exe file is gone; not sure why though.  You might need to open a Service Request for further investigation; not sure if it was removed due to upgrade or something else, but the 'sadmin.exe' file appears to be non-existent on your physical system; the MACC "Integrity" self-protection feature would prevent this file being deleted typically.

[glange]

Hi Kerry, I thought that very thing.  It's very clear that a few executables are missing.  I ran a MER with just the MA and Application Control, not all products.

[glange]

Hi Kerry, support is saying that the issue is related with the certificates in my machine.  Example:

Files\McAfee\Solidcore\Certificates\2b98e49fcd575a5eae225d686787686817a28e4741850ad42068811ac05d6b91.cer' for reading

1013       K.1996.2420: Jun 08 2020:13:15:21.114:   ERROR: sgn_x509.c  :  481: Failed to open cert file '\Device\HarddiskVolume4\Program Files\McAfee\Solidcore\Certificates\2b98e49fcd575a5eae225d686787686817a28e4741850ad42068811ac05d6b91.cer' for reading

1014       U.3352.3224: Jun 08 2020:13:15:43.773:   ERROR: qconf.c     : 1034: Failed to open file C:\Solidcore\evt_mcpl_cache_file. 2 (No such file or directory)

They recommend following the  steps in KB91662.  I performed those steps when the KB came out.   Additionally, we are running SolidCore extension 8.3.0.225.

Per the KB,
"Solution :The certificates are added in extensions 8.2.6.103, 8.3.0.225 or later."

I let them know this information.  What I don't understand is why it happens on my working physical machine and not on my VM.