cancel
Showing results for 
Search instead for 
Did you mean: 
mcdave
Level 10
Report Inappropriate Content
Message 1 of 3

Failing Agent deployment tasks

Jump to solution

The deployment of the McAfee agent fails on some of our Macs













































1/14/16 11:48:31 AM   Starting deployment to computer <NameOfMacSystem> through the Agent Handler <NameOfAgentHandler>
1/14/16 11:48:31 AM   SSH Output: Looking up host "<NameOfMacSystem>"
1/14/16 11:48:31 AM   SSH Output: Connecting to <IPaddrOfMacSystem> port 22
1/14/16 11:48:31 AM   SSH Output: Server version: SSH-2.0-OpenSSH_6.9
1/14/16 11:48:31 AM   SSH Output: Using SSH protocol version 2
1/14/16 11:48:31 AM   SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871
1/14/16 11:48:31 AM   SSH Output: Doing Diffie-Hellman group exchange
1/14/16 11:50:30 AM   SSH Output: Server unexpectedly closed network connection
1/14/16 11:50:30 AM   SSH Output: Fatal: Server unexpectedly closed network connection
1/14/16 11:50:30 AM   Error copying file C:\Windows\TEMP\mfe101606000.tmp\install.sh to <NameOfMacSystem>, system error: 1

The used account for the deployment does work perfectly (can successfully create an ssh connetion with putty)

The only working workarround atm is installing the agent manually

Any idea what the issue could be and how to resolve it?

We're using ePO 5.3.1 & Agent 5.0.2.185

Regards,

Dave

1 Solution

Accepted Solutions
mcdave
Level 10
Report Inappropriate Content
Message 3 of 3

Re: Failing Agent deployment tasks

Jump to solution

Cause found & resolved (workarround) https://kc.mcafee.com/agent/index?page=content&id=KB86193

Cause

ePO uses standard tools to deploy the McAfee Agent to non-Windows systems: PuTTY and PSCP to copy the installation files to the remote client.

The version of PSCP bundled with all versions of ePO is outdated. Agent deployment fails during the key exchange because of security changes in the later versions of the SSH server pre-installed on MAC OS X clients.

Solution

This issue will be resolved in a future release of ePO. As a temporary measure, implement the following workaround.

Workaround

Manually replace the PSCP executable that ePO uses to initiate the file transfer.

  1. Download the latest version of PSCP from PuTTY's site: www.putty.org.
  2. Back up the original pscp.exe located in the root of the ePO installation directory.
  3. Replace the original pscp.exe with the latest version downloaded from PuTTy's site.
  4. Re-attempt an agent deployment to a Mac OS X 10.11 system.
2 Replies
mcdave
Level 10
Report Inappropriate Content
Message 2 of 3

Re: Failing Agent deployment tasks

Jump to solution

It looks like the deployment task event doesn't try to logon to the Mac, as when I deliberately provide wrong credentials it still generates the exact same log output as above???

mcdave
Level 10
Report Inappropriate Content
Message 3 of 3

Re: Failing Agent deployment tasks

Jump to solution

Cause found & resolved (workarround) https://kc.mcafee.com/agent/index?page=content&id=KB86193

Cause

ePO uses standard tools to deploy the McAfee Agent to non-Windows systems: PuTTY and PSCP to copy the installation files to the remote client.

The version of PSCP bundled with all versions of ePO is outdated. Agent deployment fails during the key exchange because of security changes in the later versions of the SSH server pre-installed on MAC OS X clients.

Solution

This issue will be resolved in a future release of ePO. As a temporary measure, implement the following workaround.

Workaround

Manually replace the PSCP executable that ePO uses to initiate the file transfer.

  1. Download the latest version of PSCP from PuTTY's site: www.putty.org.
  2. Back up the original pscp.exe located in the root of the ePO installation directory.
  3. Replace the original pscp.exe with the latest version downloaded from PuTTy's site.
  4. Re-attempt an agent deployment to a Mac OS X 10.11 system.
More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center