cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor brentil
Reliable Contributor
Report Inappropriate Content
Message 1 of 10

MA for Linux fails to upgrade with ENS for Linux 10.2 installed

Ubuntu 16.04 LTS (Also experienced on 17.x as well)

ENS for Linux 10.2 (we had the same issue with VSEL 2.x as well)

MA 5.5.0 trying to upgrade to 5.5.1

ePO 5.9.1

 

We've had this issue for a while where on Ubuntu systems when we try to upgrade the MA it just doesn't work.  I've read through the logs and attempted manual upgrade by running the installer from the terminal and both show the same issue happening.  The MA is trying to shutdown the ENS or VSEL services to do the update and it just sits there infinitely waiting.  It almost looks like ti shuts them down and then starts them back up immediately without actually installing the MA first.  In the past I've found that if I shutdown the VSEL/ENS services myself manually before starting then the MA upgrade process will succeed.

 

The installed version is lower.Installation will proceed now
space required to copy archive is 69960656 bytes
space available at mfekLoSPL is 41498648576 bytes
extracting archive to mfekLoSPL... please wait
68083+1 records in
68083+1 records out
34858631 bytes (35 MB, 33 MiB) copied, 0.291171 s, 120 MB/s
Archive:  mfekLoSPL/package.zip
  inflating: mfekLoSPL/MFEma.x86_64.rpm  
  inflating: mfekLoSPL/MFErt.i686.rpm  
  inflating: mfekLoSPL/MFEma.i686.rpm  
  inflating: mfekLoSPL/MFEma.x86_64.deb  
  inflating: mfekLoSPL/MFErt.i686.deb  
  inflating: mfekLoSPL/MFEma.i686.deb  
  inflating: mfekLoSPL/reqseckey.bin  
  inflating: mfekLoSPL/srpubkey.bin  
  inflating: mfekLoSPL/sitelist.xml  
  inflating: mfekLoSPL/req2048seckey.bin  
  inflating: mfekLoSPL/sr2048pubkey.bin  
  inflating: mfekLoSPL/agentfipsmode  
  inflating: mfekLoSPL/agent.ini     
  inflating: mfekLoSPL/RepoKeys.ini  
(Reading database ... 220632 files and directories currently installed.)
Preparing to unpack MFErt.i686.deb ...
Available space : 40457032 KB
Required size   : 6144 KB
Unpacking mfert (2.0-30) over (2.0-30) ...
Setting up mfert (2.0-30) ...
Writing conf file ...
Updating linker cache ...
Runtime installed successfully
(Reading database ... 220632 files and directories currently installed.)
Preparing to unpack MFEma.x86_64.deb ...
Available space : 40454520 KB
Required size   : 27648 KB
Creating user(mfe) and group (mfe)
groupadd: group 'mfe' already exists
useradd: user 'mfe' already exists
Stopping dependent services...
******************************
Stopping service [1] : /etc/cma.d/ENDP_AM_1020LYNX/config.xml
For Product Name : McAfee Endpoint Security for Linux Threat Prevention
Status command : /opt/isec/ens/threatprevention/bin/isectpdControl.sh status
● isectpd.service - McAfee Endpoint Security for Linux Threat Preventio
   Loaded: loaded (/lib/systemd/system/isectpd.service; enabled; vendor
   Active: active (running) since Mon 2018-07-30 14:11:39 EDT; 2 days a
     Docs: man:isectpd(8)
 Main PID: 823 (isectpd)
   CGroup: /system.slice/isectpd.service
           ├─ 823 /opt/isec/ens/threatprevention/bin/isectpd
           ├─1660 /opt/isec/ens/threatprevention/bin/isectpd
           ├─2679 /opt/isec/ens/threatprevention/bin/isectpd
           └─2686 /opt/isec/ens/threatprevention/bin/isectpd

Jul 30 14:11:39 P3101C-HP-dv6 systemd[1]: Starting McAfee Endpoint Secu
Jul 30 14:11:39 P3101C-HP-dv6 systemd[1]: Started McAfee Endpoint Secur
lines 1-13/13 (END)

9 Replies
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 2 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

I would suggest opening a ticket with McAfee because we would need to look at an agent mer plus an ens mer - they are 2 separate things.

ENS mer - see kb88197

agent mer - see kb83005

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Reliable Contributor brentil
Reliable Contributor
Report Inappropriate Content
Message 3 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

I'll start a ticket and see what we can find.

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 4 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

can you run this command and post the output?

/opt/isec/ens/threatprevention/bin/isectpdControl.sh status

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 5 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

your output is strange, it should look something like this:

status.png

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 6 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

I moved this to ENS per suggestion from MA developer who reviewed this.  The status command should show what is in screenshot that I posted, but it is showing something different in customer environment and is not what the agent is expecting, so it never sends the stop command to complete the install.  There is something in that status command for ens that is not returning proper values.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Reliable Contributor brentil
Reliable Contributor
Report Inappropriate Content
Message 7 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

I have two seperate test machines that are both the same software build of Ubuntu 16.04 LTS but they're on different hardware.  One's a desktop and the other a laptop.  We installed the MA 5.5.0 on them locally and let them talk in and they pulled that ENS for Linux build from our ePO server.  Both systems are running the latest updates from Ubuntu and I've rebooted them to see if that makes any difference.  Running the /opt/isec/ens/threatprevention/bin/isectpdControl.sh status from either machine just straight up or with sudo gives the same output on both machines that I shared above just with different date/times on them.

Reliable Contributor brentil
Reliable Contributor
Report Inappropriate Content
Message 8 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

There hasn't been any activity since my thread was moved, should I make a case for this instead?

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 9 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

Yes, that will probably be the best option in the long run, as they will need data anyway that shouldn't be posted here.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
McAfee Employee ktankink
McAfee Employee
Report Inappropriate Content
Message 10 of 10

Re: MA for Linux fails to upgrade with ENS for Linux 10.2 installed

Yes, if you already haven't, please open a Service Request for one of our technicians to troubleshoot this further.

Website: https://support.mcafee.com
https://www.mcafee.com/enterprise/en-us/home/contact-us.html

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community