cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Drive Encryption status is Inactive v7.2.4.2

Jump to solution

Lately I've been noticing a few machines are having Drive Encryption problems during install.  The install goes through successfully and the PC's are rebooted afterward.  Most of these have snapped out of it and the status on the Drive Encryption piece goes to Active.  I have one right now that had the install complete successfully and then was rebooted.  Four hours later it is still inactive.  Anyone seen this before?

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 10

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

Ok, let me know if that helps.  If it doesn't, then here is what you need to look for.  DE sends an event to epo where epo needs to parse it, then assign the correct policy based on ldap lookup for the user.  That can break down in several ways.  The most common is that the agent fails to send the event through the datachannel (masvc.log will show that), or the event is sent and there are possible issues on the server side with either datachannel or failure to do an ldap lookup for the user.  The server log on the epo server or agent handler would be the one to check for those things. 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

9 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 10

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

Please look at mfeepe.log on the client machine.

Highlighted

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

I am seeing this a lot:

Unable to subscribe to data channel item EEADMIN_1000_AddDomainUsersRsp: Unexpected IPC error. Please ensure MA/Point Product service is running.

It does show this as well:

INCOMPATIBLE PRODUCT(S) DETECTED! The following incompatible product(s) were found: BitLocker

even though BitLocker isn't installed.

 

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 10

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

Are you sure it isn't installed or there aren't remnants that we are detecting? 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

The PC Tech stated it was not installed.  Now he is telling me it is installed but not active.  I asked him to remove BitLocker and start over.  Hope to know more soon.

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 10

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

Ok, let me know if that helps.  If it doesn't, then here is what you need to look for.  DE sends an event to epo where epo needs to parse it, then assign the correct policy based on ldap lookup for the user.  That can break down in several ways.  The most common is that the agent fails to send the event through the datachannel (masvc.log will show that), or the event is sent and there are possible issues on the server side with either datachannel or failure to do an ldap lookup for the user.  The server log on the epo server or agent handler would be the one to check for those things. 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

Highlighted

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

I'm pretty sure the issue was with Bit Defender being installed.  The tech disabled BitDefender and Drive Encryption is working.  Thank you for your help.

Highlighted

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

   MfeEpeCoreEncryptionPlugin           --- Activation Begins ---
2019-05-07 14:54:44,749 INFO    StatusService                        Activation has started
2019-05-07 14:54:44,749 INFO    StatusService                        Searching available Encryption Providers
2019-05-07 14:54:44,749 INFO    MfeEpeCoreEncryptionPlugin           Size of provider order list in policy is 2
2019-05-07 14:54:44,749 INFO    MfeEpeCoreEncryptionPlugin           Service with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b has state: Ready
2019-05-07 14:54:44,749 INFO    MfeEpeCoreEncryptionPlugin           Found a preferred provider with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b with state: Ready
2019-05-07 14:54:44,749 INFO    MfeEpeCoreEncryptionPlugin           Service with UUID 6477FB57-DCF1-418E-9948-9F32C57B0FA4 has state: Unsupported
2019-05-07 14:54:44,749 INFO    MfeEpeCoreEncryptionPlugin           Final preferred provider with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b is selected with state: Ready
2019-05-07 14:54:44,764 INFO    StatusService                        Located the Encryption Provider to use
2019-05-07 14:54:44,764 INFO    StatusService                        Detecting incompatible products
2019-05-07 14:54:44,811 ERROR   MfeEpeCoreEncryptionPlugin           INCOMPATIBLE PRODUCT(S) DETECTED! The following incompatible product(s) were found: BitLocker
2019-05-07 14:54:44,827 WARNING MfeEpeCoreEncryptionPlugin           INCOMPATIBLE PRODUCT(S) DETECTED! The following incompatible product(s) were found:
2019-05-07 14:54:44,827 ERROR   StatusService                        Activation has failed: Incompatible products found
2019-05-07 14:54:44,827 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE010003] INCOMPATIBLE PRODUCT(S) DETECTED! The following incompatible product(s) were found:
2019-05-07 14:54:44,827 ERROR   StatusService                        Failed to process a batch of user data received
2019-05-07 14:54:44,827 INFO    EpoState                             == End of policy enforcement ==
2019-05-07 14:54:44,827 INFO    StatusService                        Policy enforcement has completed
2019-05-07 14:54:45,061 WARNING EpoMaLpcLog                          Service not available
2019-05-07 14:54:45,061 INFO    EpoPlugin                            userHandler: handling GetAllUsers response
2019-05-07 14:54:45,061 INFO    StatusService                        Received data for assigned users
2019-05-07 14:54:45,093 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE000006] No policy store
2019-05-07 14:54:45,108 ERROR   StatusService                        Failed to process a batch of user data received
2019-05-07 14:54:45,108 INFO    StatusService                        Policy enforcement has completed
2019-05-07 14:54:45,108 INFO    EpoState                             == End of policy enforcement ==
2019-05-07 14:54:45,436 WARNING EpoMaLpcLog                          Service not available
2019-05-07 14:54:45,452 INFO    EpoPlugin                            userHandler: handling GetAllUsers response
2019-05-07 14:54:45,452 INFO    StatusService                        Received data for assigned users
2019-05-07 14:54:45,499 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE000006] No policy store
2019-05-07 14:54:45,499 ERROR   StatusService                        Failed to process a batch of user data received
2019-05-07 14:54:45,499 INFO    EpoState                             == End of policy enforcement ==
2019-05-07 14:54:45,499 INFO    StatusService                        Policy enforcement has completed
2019-05-07 14:54:45,780 INFO    EpoPlugin                            userHandler: handling GetAllUsers response
2019-05-07 14:54:45,780 INFO    StatusService                        Received data for assigned users
2019-05-07 14:54:45,811 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE000006] No policy store
2019-05-07 14:54:45,811 ERROR   StatusService                        Failed to process a batch of user data received
2019-05-07 14:54:45,827 INFO    EpoState                             == End of policy enforcement ==
2019-05-07 14:54:45,827 INFO    StatusService                        Policy enforcement has completed
2019-05-07 14:54:55,327 WARNING EpoMaLpcLog                          Service not available
2019-05-07 14:54:56,108 WARNING EpoMaLpcLog                          Service not available
2019-05-07 14:54:56,139 INFO    EpoPlugin                            userHandler: handling GetAllUsers response
2019-05-07 14:54:56,139 INFO    StatusService                        Received data for assigned users
2019-05-07 14:54:56,217 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE000006] No policy store
2019-05-07 14:54:56,217 ERROR   StatusService                        Failed to process a batch of user data received
2019-05-07 14:54:56,217 INFO    StatusService                        Policy enforcement has completed
2019-05-07 14:54:56,217 INFO    EpoState                             == End of policy enforcement ==
2019-05-07 14:54:56,389 WARNING EpoMaLpcLog                          Service not available
2019-05-07 14:54:56,405 INFO    EpoPlugin                            userHandler: handling GetAllUsers response
2019-05-07 14:54:56,405 INFO    StatusService                        Received data for assigned users
2019-05-07 14:54:56,421 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE000006] No policy store

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 10

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

I am going to move this over to the encryption team.  When the agent has done its part in getting the right policies, then it becomes a point product issue.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted

Re: Drive Encryption status is Inactive v7.2.4.2

Jump to solution

I am also having the same issue. Here is the log. 

2019-12-10 14:59:34,344 INFO LoggingService ===========================
2019-12-10 14:59:34,344 INFO LoggingService ===== Service Started =====
2019-12-10 14:59:34,344 INFO LoggingService Running EEAgent version: 7.2.9.5
2019-12-10 14:59:34,966 INFO LoggingService Operating system reported as: 10.0.18363 (64-bit)
2019-12-10 14:59:35,109 INFO LoggingService Manufacturer reported as: Dell Inc.
2019-12-10 14:59:35,109 INFO LoggingService Model reported as: Latitude E6520
2019-12-10 14:59:35,127 INFO LoggingService BIOS reported as: Dell Inc., A13 (05/17/2012)
2019-12-10 14:59:35,127 INFO LoggingService Installer version: 7.2.9.5
2019-12-10 14:59:35,127 INFO AuditService Service Started successfully
2019-12-10 14:59:35,127 INFO StatusService Service Started successfully
2019-12-10 14:59:35,129 INFO MfeEpeDiscoveryService Initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeDiscoveryService Service started successfully
2019-12-10 14:59:35,129 INFO MfeEpePluginInformationService Initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpePluginInformationService Service started successfully
2019-12-10 14:59:35,129 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 14:59:35,129 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 14:59:35,129 INFO MfeEpeCoreEncryptionPlugin MfeEpeEncryptionService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeEsEncryptionInformationService MfeEpeEncryptionInformationService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeProductDetectionPlugin MfeEpeProductDetectionService initialized successfully
2019-12-10 14:59:35,129 INFO EpoPlugin MfeEpeServiceDCServer initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeServiceLPCServer Initialized successfully
2019-12-10 14:59:35,129 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 14:59:35,129 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 14:59:35,129 INFO MfeEpePcEncryptionProviderPlugin MfeEpeEncryptionService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpePcEncryptionProviderPlugin MfeEpeEncryptionProviderService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeEsEncryptionInformationService MfeEpeEncryptionInformationService initialized successfully
2019-12-10 14:59:35,129 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 14:59:35,129 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 14:59:35,129 INFO MfeEpeCPIntegrationPlugin MfeEpeCPIntegrationService initialized successfully
2019-12-10 14:59:35,129 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 14:59:35,129 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 14:59:35,129 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 14:59:35,129 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 14:59:35,129 INFO MfeEpeOpalEncryptionProviderPlugin MfeEpeEncryptionService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeOpalEncryptionProviderPlugin MfeEpeEncryptionProviderService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeEsEncryptionInformationService MfeEpeEncryptionInformationService initialized successfully
2019-12-10 14:59:35,129 INFO MfeEpeCoreEncryptionPlugin Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeEsEncryptionInformationService Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeProductDetectionPlugin Service Started Successfully
2019-12-10 14:59:35,129 INFO EpoPlugin Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeServiceLPCServer Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpePcEncryptionProviderPlugin Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeEsEncryptionInformationService Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeCPIntegrationPlugin Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeOpalEncryptionProviderPlugin Service Started Successfully
2019-12-10 14:59:35,129 INFO MfeEpeEsEncryptionInformationService Service Started Successfully
2019-12-10 14:59:35,129 INFO PcSystem Starting (BIOS, inactive)
2019-12-10 14:59:35,129 INFO PcSystem SGX Core Cryptographic Interface is not available
2019-12-10 14:59:35,129 INFO FirstUserRegistryListener Monitoring for FirstUser registry changes
2019-12-10 14:59:35,129 INFO PcSystem Started
2019-12-10 14:59:35,137 WARNING OpalProvider Disk configuration is unsupported for Opal. All disks must be Opal disks in order to activate with the Opal provider.
2019-12-10 14:59:35,137 INFO FirstUserRegistryListener Monitoring for FirstUser registry changes
2019-12-10 14:59:39,949 INFO MfeEpeServiceLPCServer LPC state initialized.
2019-12-10 14:59:39,949 INFO MfeEpeServiceLPCServer Initial LPC state created.
2019-12-10 14:59:39,949 INFO MfeEpeServiceLPCServer LPC services started.
2019-12-10 14:59:39,949 INFO MfeEpeServiceLPCServer Service initialized.
2019-12-10 14:59:39,949 INFO MfeEpeKeyServerService Initialized successfully
2019-12-10 14:59:39,949 INFO MfeEpeKeyServerService Service Started Successfully
2019-12-10 14:59:39,949 ERROR MfeEpeServiceLPCServer Unable to subscribe to data channel item EEADMIN_1000_AddDomainUsersRsp: Unexpected IPC error. Please ensure MA/Point Product service is running.
2019-12-10 14:59:39,949 ERROR MfeEpeServiceLPCServer Unable to unsubscribe from data channel item EEADMIN_1000_AddDomainUsersRsp: Unexpected IPC error. Please ensure MA/Point Product service is running.
2019-12-10 14:59:39,949 ERROR MfeEpeServiceLPCServer Unable to unsubscribe from data channel item EEADMIN_1000_GetAllUsersRsp: Unexpected IPC error. Please ensure MA/Point Product service is running.
2019-12-10 14:59:47,929 INFO DRIVER Session notification: EPEPC_DRIVER_SESSION_LOGON
2019-12-10 15:00:08,384 INFO EpePcMonitor.12780 Started
2019-12-10 15:02:21,477 INFO EpoPlugin Reporting TargetState property as Active
2019-12-10 15:02:21,478 INFO EpoPlugin collectProperties: dispatching disk list to AgentHandler
2019-12-10 15:02:21,486 INFO EpoPlugin enforcePolicy: new policy store created (session 1575989979).
2019-12-10 15:02:22,196 INFO EpoPlugin enforcePolicy: Waiting for OptIn users (i.e. non-default UBP users) before enforcing policy.
2019-12-10 15:02:22,211 INFO EpoState == Start of policy enforcement ==
2019-12-10 15:02:22,213 INFO StatusService Policy enforcement has started
2019-12-10 15:02:22,213 INFO EpoPlugin enforceUserPolicy: Dispatching enforce policy event.
2019-12-10 15:02:22,215 INFO EpoPlugin policyHandler: handling EnforcePolicy event
2019-12-10 15:02:22,219 INFO EpoPlugin userHandler: handling AddLocalDomainUsers event
2019-12-10 15:02:22,220 INFO DomainUsers Searching for any local domain users.
2019-12-10 15:02:22,226 WARNING DomainUsers Found invalid SID in registry profile list during ALDU (S-1-5-21-1645522239-2139871995-682003330-182522.bak).
2019-12-10 15:02:22,227 INFO DomainUsers Found new (unprocessed in this session) local domain user: \domain\user1
2019-12-10 15:02:22,227 INFO DomainUsers Found new (unprocessed in this session) local domain user: \domain\user2
2019-12-10 15:02:22,227 INFO EpoPlugin userHandler: dispatching EPOAddDomainUsers event to McAfee Agent
2019-12-10 15:02:22,228 INFO EpoPlugin userHandler: Note, press Send Events button in McAfee Agent to hasten delivery (see KB71865).
2019-12-10 15:02:22,260 INFO StatusService Creating Event to request data for local domain users
2019-12-10 15:02:22,319 INFO EpoPlugin enforcePolicy: skipping policy enforcement, since we already performed one within the last 20 seconds.
2019-12-10 15:02:22,334 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:03:34,332 INFO EpoPlugin Reporting TargetState property as Active
2019-12-10 15:03:34,332 INFO EpoPlugin collectProperties: dispatching disk list to AgentHandler
2019-12-10 15:03:35,260 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:03:35,268 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:13,541 INFO EpoPlugin Reporting TargetState property as Active
2019-12-10 15:05:13,541 INFO EpoPlugin collectProperties: dispatching disk list to AgentHandler
2019-12-10 15:05:14,514 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:14,524 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:15,392 INFO EpoPlugin enforcePolicy: skipping policy enforcement, since we already performed one within the last 20 seconds.
2019-12-10 15:05:15,410 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:16,132 INFO EpoPlugin enforcePolicy: skipping policy enforcement, since we already performed one within the last 20 seconds.
2019-12-10 15:05:16,141 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:19,181 INFO EpoPlugin enforcePolicy: skipping policy enforcement, since we already performed one within the last 20 seconds.
2019-12-10 15:05:19,191 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:20,056 INFO EpoPlugin enforcePolicy: skipping policy enforcement, since we already performed one within the last 20 seconds.
2019-12-10 15:05:20,065 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:05:21,485 INFO EpoPlugin Reporting TargetState property as Active
2019-12-10 15:05:21,485 INFO EpoPlugin collectProperties: dispatching disk list to AgentHandler
2019-12-10 15:05:22,369 INFO EpoPlugin enforcePolicy: skipping policy enforcement, since we already performed one within the last 20 seconds.
2019-12-10 15:05:22,387 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:14:20,760 INFO DRIVER Session notification: EPEPC_DRIVER_SESSION_CONSOLE_DISCONNECT
2019-12-10 15:14:21,662 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 15:14:21,665 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 15:14:21,969 INFO DRIVER Session notification: EPEPC_DRIVER_SESSION_REMOTE_CONNECT
2019-12-10 15:14:22,635 INFO CoreCrypto Checking if this machine supports the Software Guard Extensions by attempting to initialise an enclave
2019-12-10 15:14:22,637 INFO CoreCrypto Software Guard Extensions not available on this machine (unable to load DLL linked to the SGX platform software)
2019-12-10 15:14:22,758 INFO DRIVER Session notification: EPEPC_DRIVER_SESSION_LOCK
2019-12-10 15:14:22,967 INFO DRIVER Session notification: EPEPC_DRIVER_SESSION_UNLOCK
2019-12-10 15:16:14,376 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.
2019-12-10 15:16:14,385 INFO EpoPlugin enforcePolicy: Policy Enforcement is already in progress, skipping this one.

On this machine the bitlocker is turned off and the Drive Encryption was installed properly. Please suggest me what to do, thank you! 

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community