cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
guangxian
Level 7
Report Inappropriate Content
Message 1 of 12

An unknown error occurred while processing the certificate

I recently set up a new agent handler in my environment,I have assgined some agents to it.

A issue was from the Mcafee agent monitor: "Failed to upload package to ePO Server".

So i check the logs from agents and agent handler:

agent client log:

020-08-08 09:10:19.571 masvc(3612.4124) ahclient.Info: Network library rc = <1008>, Agent handler reports response code <503>.
2020-08-08 09:10:19.571 masvc(3612.4124) ahclient.Info: Agent handler reports server busy. response code 503.
2020-08-08 09:10:19.571 masvc(3612.4124) ahclient.Info: Spipe connection response received, network return code = 1008, response code 503.
2020-08-08 09:10:19.571 masvc(3612.4124) DataChannel.Manager.Error: Failed to upload DataChannel items - Network<1008>, HTTP Response<503>
2020-08-08 09:10:19.572 masvc(3612.4124) DataChannel.Manager.Error: Failed to upload package to ePO Server
2020-08-08 09:10:19.573 masvc(3612.4124) ahclient.Info: Agent communication session closed

Agent handler log:

20200808091038 E #04324 MCUPLOAD SecureHttp.cpp(984): Failed to send HTTP request. Error=An unknown error occurred while processing the certificate.
20200808091038 E #04324 MCUPLOAD (-2146893017)
20200808091038 E #04324 NAIMSERV server.cpp(558): Failed to send request, err=0x80004005, HTTP status code=0
20200808091038 E #04324 NAIMSERV server.cpp(923): Error sending data channel message to application server

I have searched for some information in google,but it didn't work,  also try some mcafee KBs.

Does Anyone know how to fix below issues of agent and agent handler?

11 Replies
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 12

Re: An unknown error occurred while processing the certificate

Have you tried regenerating the certificate?  See KB90760.  Also, make sure ports 8443 and 8444 (or whatever ports you are using if these have changed) are open from ah to epo server.  The agent handler uses both ports for communication with tomcat.  

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

guangxian
Level 7
Report Inappropriate Content
Message 3 of 12

Re: An unknown error occurred while processing the certificate

Sorry for my late response.
I skipped the agent handler and let agents directly connect to epo.
The error still occured,I found that only MA5.7 had this error.
MA5.5 don't has the error.Any suggestion?
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 12

Re: An unknown error occurred while processing the certificate

Was the 5.7 agent installed with forceinstall by any chance?  See if this KB applies:

Agents fail to communicate to ePO after using the /forceinstall switch upgrading to MA 5.7 (mcafee.c...

If not, the datachannel errors are of significant interest and should be looked into.  There are several kb's if you are still getting those errors.  

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

guangxian
Level 7
Report Inappropriate Content
Message 5 of 12

Re: An unknown error occurred while processing the certificate

Thank you your repaly~

I install MA5.7 to a new computer without useing forceinstall paramter.The error remain occur.I checked the kb your posted and don't find similar log.
Maybe there have some differences between MA5.5 and MA5.7,I just wonder why MA5.5 don't have this error? If this error can't be fixed,I will give up plan that upgrade from MA5.5 to MA5.7.

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 12

Re: An unknown error occurred while processing the certificate

What is the error found in the server log for epo server for the connection attempt?  If you get sequence error, follow workaround in kb temporarily till clients check in, then re-enable sequence checking.  As for the agent handler, this needs resolved and would cause communication failures to it.  We are discovering that the issue could occur with 5.7 even if forceinstall was not used.  I would suggest opening a ticket with McAfee - the 2 issues are separate, so start with the kb first to see if that resolves communication to epo.  If it does, then open one for the agent handler issue.

Agent handler log:

20200808091038 E #04324 MCUPLOAD SecureHttp.cpp(984): Failed to send HTTP request. Error=An unknown error occurred while processing the certificate.
20200808091038 E #04324 MCUPLOAD (-2146893017)
20200808091038 E #04324 NAIMSERV server.cpp(558): Failed to send request, err=0x80004005, HTTP status code=0
20200808091038 E #04324 NAIMSERV server.cpp(923): Error sending data channel message to application server

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

guangxian
Level 7
Report Inappropriate Content
Message 7 of 12

Re: An unknown error occurred while processing the certificate

My environment MA5.7 directly connect to Epo server,no sequence error record in server log,Below is the log for xxxxx122(installed MA5.7) in server log:


20210224094325 I #05584 NAIMSERV Processed [MsgUpload] from xxxxx122:{4C827D78-73DE-12EB-079D-3417EB9EE0F0} in 125ms
20210224094325 E #05584 NAIMSERV AgentServerCommHandler.cpp(656): Failed to process agent request
20210224094325 I #05584 MOD_EPO epo request processed, rc=503, session ID=30268, session time=141ms
20210224094336 I #05584 NAIMSERV Received [MsgUpload] from xxxxx122:{4C827D78-73DE-12EB-079D-3417EB9EE0F0}
20210224094336 E #05584 MCUPLOAD SecureHttp.cpp(984): Failed to send HTTP request. Error=An unknown error occurred while processing the certificate.

20210224094336 E #05584 MCUPLOAD (-2146893017)
20210224094336 E #05584 NAIMSERV server.cpp(558): Failed to send request, err=0x80004005, HTTP status code=0
20210224094336 E #05584 NAIMSERV server.cpp(923): Error sending data channel message to application server

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 12

Re: An unknown error occurred while processing the certificate

You must resolve this:

20210224094336 E #05584 MCUPLOAD SecureHttp.cpp(984): Failed to send HTTP request. Error=An unknown error occurred while processing the certificate.

20210224094336 E #05584 MCUPLOAD (-2146893017)
20210224094336 E #05584 NAIMSERV server.cpp(558): Failed to send request, err=0x80004005, HTTP status code=0
20210224094336 E #05584 NAIMSERV server.cpp(923): Error sending data channel message to application server

Please follow this KB to regenerate the apache certs.  If that doesn't resolve, then please open a ticket so we can get more detail in the logs and work with you to resolve this.

https://kc.mcafee.com/corporate/index?page=content&id=KB90760

Is epo in the middle of a certificate migration by any chance?

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

guangxian
Level 7
Report Inappropriate Content
Message 9 of 12

Re: An unknown error occurred while processing the certificate

Thanks a lot!
I will try this KB,I hope it can fix my problem.
Yes this server has done a recovery before,I heard from my colleague.
If i regenerate certs,will it affect communication between the existing MA and epo?
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 10 of 12

Re: An unknown error occurred while processing the certificate

It is possible, it depends on what the problem is with the certs.  One thing I would check, but please don't post here, as it contains sensitive info.

Run the following scripts in sql and see if there is a duplicate entry in either table for the agent handler in question.

select * from epoagenthandlerkeydata

select * from eporegisteredapacheservers

If there is, let me know please.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community