how to install ePO 5.10 update 11 hotfix 2 EPO510CU11HF2.zip

[RoRev]

I was able to download EPO510CU11HF2.zip for ePO 5.10 update 11, but I can't find any instructions anywhere for how to install it. Can someone provide that? Thanks.

[markgarza · Accepted solution]

It is in the release notes: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/CORP_KNOWLEDGEBASE/95000/KB95109/en_US/ePo...

[Former Member]

how can we ensure that cu 11 hotfix 2  is installed or performed properly ?

[cdinet]

The release notes tell you what files are replaced in the hotfix.  Also you can run a scan for the log4j vulnerability.  Ignore any results that point only to backup folders.

[User13678089]

release notes are deleted is it possible to have them uploaded or sent directly to me? I have a customer that insists to stay on update 11

[ChrisQ]

CU11 HF2 Installation Instructions (assuming HF1 done, if not  log4j files will be an earlier version :

1. Shut down the ePO services:
a. Press the Windows key + R.
b. Type services.msc in the field and press Enter.
c. Right-click each of the ePO services below and select Stop:
McAfee ePolicy Orchestrator 5.#.# Application Server (aka Tomcat)
McAfee ePolicy Orchestrator 5.#.# Server (aka: Apache)
McAfee ePolicy Orchestrator 5.#.# Event Parser

2. Rename the files listed below.
The files below are located in C:\Program Files (x86)\McAfee\ePolicy
Orchestrator\Server\lib\

Rename from                        Rename to
log4j-1.2-api-2.16.0.jar         log4j-1.2-api-2.16.0.jar.bak
log4j-1.2-api-2.16.0.jar.sig    log4j-1.2-api-2.16.0.jar.sig.bak
log4j-api-2.16.0.jar                log4j-api-2.16.0.jar.bak
log4j-api-2.16.0.jar.sig          log4j-api-2.16.0.jar.sig.bak
log4j-core-2.16.0.jar             log4j-core-2.16.0.jar.bak
log4j-core-2.16.0.jar.sig       log4j-core-2.16.0.jar.sig.bak

3. Replace the files with the hotfix versions:
log4j-1.2-api-2.17.0.jar
log4j-1.2-api-2.17.0.jar.sig
log4j-api-2.17.0.jar
log4j-api-2.17.0.jar.sig
log4j-core-2.17.0.jar
log4j-core-2.17.0.jar.sig

4. Restart the ePO services.

[cdinet]

Update 12 was released that contains hotfix 2, so you can run that instead to do it for you instead of manually installing the files.  That is the only fix in cu 12.

[pablo671]

Can you bypass update 11 completely and install 12, or does 11 need to be installed first? Thanks