We deployed DXL/TIE/MAR onto one server. ePO 5.9.1, DXL version 4.1, TIE 2.3 and MAR 2.4.
We received errors:
Failed to configure McAfee Agent
Failed to get ePO FIPS mode - problem with ePO server certificate, though it appears to be correctly matched. cURL error 22
All of this when trying to continue without cert. We found that the certs are on ePO but are not making it to TIE server for some reason.
Reconfig-cert gives the error "New signed cert not received" and then TIE Server and PostgreSQL won't start.
Tried disabling cert validation for the TIE on ePO Registered Servers.
Tried the command to regenerate certs for TIE in ePO browser as well as reconfig-ca.
I'm at a loss and feel like Support will take weeks to figure it out. I'm going to try deploying them for a third time, separately, but I have a feeling this will happen again with TIE.
Go to Solution.
We ended up solving this, but had to split the servers into two, one with TIE/MAR and the other with DXL. I also updated DXL to 5.0.
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center
2821 Mission College Blvd.
Santa Clara, CA 95054 USA
Consumer Support | Enterprise Support | McAfee.com
Legal | Privacy | Copyright © 2019 McAfee, LLC