ePO Server Upgrade from 5.3.2 to 5.3.3 Failing

[ragesto]

I am trying to upgrade our ePO server from 5.3.2 to 5.3.3 (OS: Server 2012 R2).  The installer gets all the way to the point of starting the new services before failing.  Looking at the Services window shows the following services:

• McAfee ePolicy Orchestrator 5.3.2 Application Server (instead of 5.3.3)
• McAfee ePolicy Orchestrator 5.3.3 Event Parser
• McAfee ePolicy Orchestrator 5.3.3 Server

I can see the Server service running, but it never starts the other two.  After 10 minutes it gives up, rolls back the changes, and then starts all services (which are now 5.3.2).  The installer exits with error code 1603.

Any ideas would be greatly appreciated!

[Trooper]

Hi,

try to find real error under \\Servername\c$\Users\username\AppData\Local\Temp\McAfeeLogs\EPO530-Troubleshoot\MFS

[ragesto]

core-patch Log

Aside from a few lines similar to:

     [run-sql] WARN: <<< Removing tenant-filter for OrionExportPreferences.

     [run-sql] WARN: <<< View script for OrionExportPreferences: ALTER  VIEW OrionExportPreferences AS SELECT t.* FROM OrionExportPreferencesMT t .

     [run-sql] 0: EXEC [dbo].[MFSCore_RemoveTenantFilterInView] N'OrionGroups'...

The only other lines that stick out are:

     verify-upgrade:

          [echo] old version=5.5.2.0

          [echo] new version=5.5.3.0

          [fail-unsupported-platform-upgrade] Verifying upgrade from (ver=5.5.2.0, MT=false) to (ver=5.5.3.0, MT=false)

and

     [run-sql] WARN: <<< COMPLETED upgrade_5_5_3_0_RemoveTenantDetailsFromTrigger.sql : Oct 18 2017  7:45AM >>>

     [echo] Updating database schema version ...

     [run-sql] 1: UPDATE [dbo].[OrionConfiguration] SET SchemaVersion = 175;...

     [echo] catalina.home is E:/McAfee/EPOLIC~1/server

The core-rollback log looks good.

[twenden]

Did you try running the Pre Installation auditor before installing ePO 5.3.3. I did that on mine and found out that I had to change cipher suites, remove old product etc.

[ragesto]

I've been trying to run the ePO PIA, but I'm having a hard time figuring out what it wants for the SQL Server Windows Credentials.  The top SQL Server credentials connect to the DB just fine, but it doesn't like any credentials I'm trying for the SQL Server Windows Credentials.

[chfl]

Hello,

unfortunately we have the exact same problem here. Tried upgrade from ePO 5.3.1 to 5.3.3 today, fails and rolls back the changes.

ePO PIA Tool => all ok except "SQL Server System RSA Compatibility"

According to this thread and the support (You may ignore the RSA compatibility check failure when running the ePO Pre-Install Auditor tool. the upgrade will be successful without SSL connection to SQL server) this should not impact installing.

We are not using ssl connecting to the SQL Server anyway.

I can see the following errors in Logs:

EPO530-Install-CustomAction.LOG:

MerModCALog: FAILURE: In LaunchAppAndWait while trying to run the following program:"D:\PROGRA~2\McAfee\EPOLIC~1\jre\bin\java.exe"

Return code: 1

Error Message: Incorrect function.

EPO530-Error.Ini

[ErrorLog]

ErrorString=FAILURE: While starting the service [MCAFEETOMCATSRV530] because the MFS core webapps did not start correctly.

ActionName=MerMod_StartCurrentServices

CustomAction: MerMod_StartCurrentServices

core-patch.log looks good

BUILD SUCCESSFUL

Total time: 1 minute 17 seconds

Tried Upgrade from 5.3.1 to 5.3.2 then and this works whitout any problems.

Upgrade from 5.3.2 to 5.3.3 still does not work. Same Problem as 5.3.1 to 5.3.3

Any ideas would be greatly appreciated here too!

[bola_2911]

I have the same issue, upgrade of the epo from 5.3.2 to epo 5.3.3 is getting failed.

Summary:

epo 5.3.2 installed on server 2008 R2 and also sql 2012 on the same server.

then taken the backup of the SQl, by following

McAfee Corporate KB - How to back up and restore the ePolicy Orchestrator database using SQL Server ...

backup the epo folders.

McAfee Corporate KB - ePolicy Orchestrator server backup and disaster recovery procedure KB66616

Downloaded the epo 5.3.3 setup.

extracted the zip file.

ran the upgardecompatibility tool.

there is no any product incompatible.

Started the setup.exe file.

Entered the SQL credentials.

the installation started.

But it failed in the end with an error,

The wizard was interrupted before McAfee epo could be completed installed.

Your system has not been modified. to complete installation at another time, please run setup again.

What could be the problem here.

Thanks

K

[chfl]

Hi,

we called McAfee Support and they figured out the problem after some testing.

Obviously there was a problem with our server certificate (self-signed). After "regenerate a self-signed certificate and private key" under server settings the 5.3.3 update worked.

Greetz

[braindope]

I'm also going to upgrade my ePO 5.3.2 to 5.3.3, what is the filename for 5.3.3 I want to download the correct one, I'm getting confuse on all the files in the download site

[JeroenM]

@chfl Thank you for posting this solution! I had the same problem and regenerating the certificate was the solution.