cancel
Showing results for 
Search instead for 
Did you mean: 
mcdave
Level 10
Report Inappropriate Content
Message 1 of 3

Failing Agent deployment tasks

Jump to solution

The deployment of the McAfee agent fails on some of our Macs













































1/14/16 11:48:31 AM   Starting deployment to computer <NameOfMacSystem> through the Agent Handler <NameOfAgentHandler>
1/14/16 11:48:31 AM   SSH Output: Looking up host "<NameOfMacSystem>"
1/14/16 11:48:31 AM   SSH Output: Connecting to <IPaddrOfMacSystem> port 22
1/14/16 11:48:31 AM   SSH Output: Server version: SSH-2.0-OpenSSH_6.9
1/14/16 11:48:31 AM   SSH Output: Using SSH protocol version 2
1/14/16 11:48:31 AM   SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871
1/14/16 11:48:31 AM   SSH Output: Doing Diffie-Hellman group exchange
1/14/16 11:50:30 AM   SSH Output: Server unexpectedly closed network connection
1/14/16 11:50:30 AM   SSH Output: Fatal: Server unexpectedly closed network connection
1/14/16 11:50:30 AM   Error copying file C:\Windows\TEMP\mfe101606000.tmp\install.sh to <NameOfMacSystem>, system error: 1

The used account for the deployment does work perfectly (can successfully create an ssh connetion with putty)

The only working workarround atm is installing the agent manually

Any idea what the issue could be and how to resolve it?

We're using ePO 5.3.1 & Agent 5.0.2.185

Regards,

Dave

1 Solution

Accepted Solutions
mcdave
Level 10
Report Inappropriate Content
Message 3 of 3

Re: Failing Agent deployment tasks

Jump to solution

Cause found & resolved (workarround) https://kc.mcafee.com/agent/index?page=content&id=KB86193

Cause

ePO uses standard tools to deploy the McAfee Agent to non-Windows systems: PuTTY and PSCP to copy the installation files to the remote client.

The version of PSCP bundled with all versions of ePO is outdated. Agent deployment fails during the key exchange because of security changes in the later versions of the SSH server pre-installed on MAC OS X clients.

Solution

This issue will be resolved in a future release of ePO. As a temporary measure, implement the following workaround.

Workaround

Manually replace the PSCP executable that ePO uses to initiate the file transfer.

  1. Download the latest version of PSCP from PuTTY's site: www.putty.org.
  2. Back up the original pscp.exe located in the root of the ePO installation directory.
  3. Replace the original pscp.exe with the latest version downloaded from PuTTy's site.
  4. Re-attempt an agent deployment to a Mac OS X 10.11 system.
2 Replies
mcdave
Level 10
Report Inappropriate Content
Message 2 of 3

Re: Failing Agent deployment tasks

Jump to solution

It looks like the deployment task event doesn't try to logon to the Mac, as when I deliberately provide wrong credentials it still generates the exact same log output as above???

mcdave
Level 10
Report Inappropriate Content
Message 3 of 3

Re: Failing Agent deployment tasks

Jump to solution

Cause found & resolved (workarround) https://kc.mcafee.com/agent/index?page=content&id=KB86193

Cause

ePO uses standard tools to deploy the McAfee Agent to non-Windows systems: PuTTY and PSCP to copy the installation files to the remote client.

The version of PSCP bundled with all versions of ePO is outdated. Agent deployment fails during the key exchange because of security changes in the later versions of the SSH server pre-installed on MAC OS X clients.

Solution

This issue will be resolved in a future release of ePO. As a temporary measure, implement the following workaround.

Workaround

Manually replace the PSCP executable that ePO uses to initiate the file transfer.

  1. Download the latest version of PSCP from PuTTY's site: www.putty.org.
  2. Back up the original pscp.exe located in the root of the ePO installation directory.
  3. Replace the original pscp.exe with the latest version downloaded from PuTTy's site.
  4. Re-attempt an agent deployment to a Mac OS X 10.11 system.
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community