2 Replies Latest reply on May 10, 2017 6:41 AM by bretzeli

    ENS 10.5.1 Migration: Event 1119, Unable to update AMCORE on Mcafee Agent 5.0.4 after ENS 10.2 to 10.5.1 Migration

    bretzeli

      Warning for all who migrate from 10.2 to 10.5.1! any feedback welcome > esp. on the 1-2 Reboots the Migration needs and we have not seen with other customers.

       

      Event 1119, Unable to update AMCORE Content and Scan Module with Mcafee Agent 5.0.4 after ENS 10.2 to 10.5.1 Migration

       

      Setup:

      Customer had a running and working EPO 5.3.2 in German client environment.

       

      What was done?

      During a migration scenario with Agent 5.0.4 and ENS 10.2 we wanted to update to ENS 10.5.1.

       

      Error:

      After the Update for the “Platform” and “Endpoint security Threat Prevention” we had following problems:

       

      • AMCORE Content did not update > By Task > By Enduser GUI “Jetzt Aktualisieren” “Update
        Now” turned RED
      • Error on German Clients: Fehler bei der Aktualisierung. Siehe Ereignisprotokoll, Event ID: 1119
      • Downloading file from https://eposerver006:443/Software/SiteStat.xml?hash={15bbaf26-2e42-16e7-37b9-8be54700e4e7}
        to C:\Windows\TEMP\SiteStat.xml failed. (Manuel open of XML in browser worked fine)
      • Migration from 10.2 > 10.5.1 > Clients needed to reboot 1-2 times to get the second
        part “Threat Prevention running. That may be by design for 10.2 to 10.5.1 but
        we had other cases where this worked (This seems to be how it is EVEN with
        Framework 5.0.5). We had one customer where this worked in ONE during a 10.2 to
        10.5 RTM migration.

       

      AMCONTENT Version stays at 0.5

       

       

      Solution for Event 1119

       

      We could solve this in Upgrading the Mcafee Framework Agent from 5.0.4 to 5.0.5 RTM (5.0.5.6585). This is filled in the release notes
      under Mcafee 1156417. This even when the 10.5.1 ENS is already on the client and the client is in that stalled MODUS where he does not update AMCORE Content.

      1. 5.0.4.400
        (Hotfix not seen in Software Updater of EPO also the 5.0.5 to date) did not solve it.

       

      This is the config we had:

      1. 5.0.4.283
      2. 10.2.0.619
      3. 10.2.0.620

       


      This is the Config all was working fine afterwards:

      1. 5.0.5.658


       

      This is what’s wrong and how you see it after you enable the View Colums in EPO!


       


       

       

       

      Errors we did see on clients:

       

      c:\ProgramData\McAfee\Common Framework\logs\McScript_error.log

      2017-05-01 09:45:02      E             #4528    downloader          Downloading file from https://10.20.12.203:443/Software/SiteStat.xml?hash={15bbaf26-2e42-16e7-37b9-8be51700e4e7}
        to C:\Windows\TEMP\SiteStat.xml failed.

      If you MANUALY open
        the XML file in a browser this works fine

       

      c:\ProgramData\McAfee\Endpoint Security\Logs\PackageManager_Activity.log

      1. 02.05.2017
          10:25:59   mfeesp(2600.3848)
          <SYSTEM> PackageManager.PackageManager.Activity: Fehler beim Herunterladen von C:\ProgramData\McAfee\Common
          Framework\\Current\AMCORDAT2000\DAT\0000\PkgCatalog.z.
      2. 02.05.2017 10:25:59   mfeesp(2600.3852) <SYSTEM>
          PackageManager.PackageManager.Activity: Fehler beim Aktualisieren auf Version
          2966.0.
      3. 02.05.2017 10:26:00 
          mfeesp(2600.4004) <SYSTEM>
          PackageManager.PackageManager.Activity: Bei der Aktualisierung sind Fehler
          aufgetreten. Weitere Informationen finden Sie im Fehlerprotokoll.
      4. 02.05.2017 10:31:56 
          mfeesp(2600.3160) <SYSTEM>
          PackageManager.PackageManager.Activity: AutoUpdate wird gestartet:
          Standard-AutoUpdate
      5. 02.05.2017 10:31:59 
          mfeesp(2600.3852) <SYSTEM>
          PackageManager.PackageManager.Activity: Aktualisierung wird ausgeführt

       


       

       

      Release Notes Agent 5.0.5

      https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/ 26000/PD26907/en_US/ma_505_rn_0-00_en-us.pdf


        
       


        
       


        
       

       

       

      Some more info we have pulled together:

       

      Butsch.ch | MCAFEE: Unable to update AMCORE with Mcafee Agent 5.0.4 after ENS 10.2 to 10.5.1 Migration