cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Reliable Contributor twenden
Reliable Contributor
Report Inappropriate Content
Message 1 of 3

Question about migrating ePO root cert from SHA-1 to SHA-2 and impact on system images

Jump to solution

I have just started to look at the certificate manager fro migrating the ePO 5.9.1 server's root cert from SHA-1 to SHA-2. It states that you wait until you get close to 100% saturation before fulling activating.

It does not mention on how you deal with system images that already have a ePO agent in the image without the agent guid. We have a lot of IT groups that have created system images that they deploy to lab systems. These images have the current ePO agent in the image. What would be the impact of migrating to SHA-2 and how will it affect systems that get re-imaged. 

Does the certificate manager create another ePO agent that has the SHA-2 certs in them? I am confused and trying to avoid a situation where images systems won't be able to talk back.

1 Solution

Accepted Solutions
Reliable Contributor Nielsb
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: Question about migrating ePO root cert from SHA-1 to SHA-2 and impact on system images

Jump to solution

Hi Twenden,

The epo console/ certificate manager regenerate a new version of the McAfee agent, you can double check the last modified date of the framepkg.exe

You have to update your McAfee agent "Framepkg.exe" in your images/SCCM task sequence .

You can find the framepkg.exe in the folder below:

Installation drive \Program Files (x86)\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409

2 Replies
Reliable Contributor Nielsb
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: Question about migrating ePO root cert from SHA-1 to SHA-2 and impact on system images

Jump to solution

Hi Twenden,

The epo console/ certificate manager regenerate a new version of the McAfee agent, you can double check the last modified date of the framepkg.exe

You have to update your McAfee agent "Framepkg.exe" in your images/SCCM task sequence .

You can find the framepkg.exe in the folder below:

Installation drive \Program Files (x86)\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409

Reliable Contributor twenden
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: Question about migrating ePO root cert from SHA-1 to SHA-2 and impact on system images

Jump to solution

Thanks

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community