2 Replies Latest reply on Jan 21, 2013 7:41 AM by Sailendra Pamidi

    ePO Agent "Failed to load certificate" at ..\Common Framework\cabundle.cer

      Hi,

       

      We have moved from ePO 4.5.0 to ePO 4.6.1. This was done by a fresh install of ePO 4.6.1 on a new server while keeping the name, IP, ports that were in place on ePO 4.5.0. ePO 4.6.1 installation was done when the ePO 4.5 server got disconnected and the new one with the same name IP connected to the network. Firewall rules were in place to prevent agents communication until all policy assignements and other settings are in place.

      Once all was set on ePO 4.6.1, we imported the security keys backed up the old server (again - same name and IP) and removed the blocking Firewall rules. Out of about 50 machines, only 4 reported to ePO and got the status managed. The rest are reporting the following issue in the logs:

       

      **************************** STARTOF AGENT LOG **************************************

      2012-02-09 17:27:15    i    #2812    Agent    Agent communication session started

      2012-02-09 17:27:15    i    #2812    Agent    Agent is sending EVENT package to ePO server

      2012-02-09 17:27:15    i    #2812    Agent    Agent is connecting to ePO server

      2012-02-09 17:27:15    e    #2812    Agent    Agent failed to communicate with ePO Server

      2012-02-09 17:27:15    i    #2812    Agent    Agent communication session closed

      2012-02-09 17:27:15    I    #2812    Agent    Agent communication failed, result=-2400

      2012-02-09 17:27:15    I    #2812    Agent    Exponential retry in 763 seconds, error=-2400(Unable to connect to ePO Server)

      2012-02-09 17:27:15    i    #2812    Agent    Agent will connect to the ePO Server in 12 minutes and 43 seconds.

      2012-02-09 17:28:43    i    #2820    Agent    Agent started performing ASCI

      2012-02-09 17:28:43    I    #2820    Agent    Forcing full properties send

      2012-02-09 17:28:43    I    #2820    Agent    Agent is sending FULL PROPERTIES

      2012-02-09 17:28:43    I    #2812    Agent    Started processing a package..

      2012-02-09 17:28:43    I    #2812    Agent    Preparing Props Package

      2012-02-09 17:28:43    I    #2812    Agent    Agent communication failed, result=-48

      2012-02-09 17:28:43    I    #2812    Agent    Started processing a package..

      2012-02-09 17:28:43    I    #2812    SpiPkgr    Using sequence number 28275

      2012-02-09 17:28:43    i    #2812    Agent    Agent communication session started

      2012-02-09 17:28:43    i    #2812    Agent    Agent is sending EVENT package to ePO server

      2012-02-09 17:28:43    i    #2812    Agent    Agent is connecting to ePO server

      2012-02-09 17:28:43    I    #2812    imutils    Trying with site: 10.1.1.10:8114

      2012-02-09 17:28:43    I    #2812    naInet    HTTP Session initialized

      2012-02-09 17:28:43    I    #2812    imsite        Upload from: D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732769174390000_1495901959.spkg

      2012-02-09 17:28:43    I    #2812    imsite        Upload response target: D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg

      2012-02-09 17:28:43    E    #2812    MfeCryptC    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    MfeCryptC      Failed to load certificate D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\cabundle.cer

      2012-02-09 17:28:43    E    #2812    MfeCryptC   

      2012-02-09 17:28:43    E    #2812    MfeCryptC    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    MfeCryptC      Failed to setup new connection

      2012-02-09 17:28:43    E    #2812    MfeCryptC   

      2012-02-09 17:28:43    E    #2812    MfeCryptC    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    MfeCryptC      Failed to load certificate D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\cabundle.cer

      2012-02-09 17:28:43    E    #2812    MfeCryptC   

      2012-02-09 17:28:43    E    #2812    MfeCryptC    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    MfeCryptC      Failed to setup new connection

      2012-02-09 17:28:43    E    #2812    MfeCryptC   

      2012-02-09 17:28:43    E    #2812    MfeCryptC    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    MfeCryptC      Failed to load certificate D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\cabundle.cer

      2012-02-09 17:28:43    E    #2812    MfeCryptC   

      2012-02-09 17:28:43    E    #2812    MfeCryptC    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    MfeCryptC      Failed to setup new connection

      2012-02-09 17:28:43    E    #2812    MfeCryptC   

      2012-02-09 17:28:43    E    #2812    imsite    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    imsite      NaInet library returned code == -92

      2012-02-09 17:28:43    E    #2812    imsite    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    imsite      NaInet library returned code == -92

      2012-02-09 17:28:43    E    #2812    imsite    Error trace:

      2012-02-09 17:28:43    E    #2812    imsite     [uploadFile,,/spipe/pkg?AgentGuid={B2BDBD1F-5EE8-4DF6-811B-71EEE4C28A4D}&Source =Agent_3.0.0,pkg00129732769174390000_1495901959.spkg,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack,D:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129732785232670000_2383115516.spkg]->

      2012-02-09 17:28:43    E    #2812    imsite      The naInet library returned an error. [Parent error: NaInet library returned code == -92]

      2012-02-09 17:28:43    I    #2812    naInet    HTTP Session closed

      2012-02-09 17:28:43    e    #2812    Agent    Agent failed to communicate with ePO Server

      2012-02-09 17:28:43    i    #2812    Agent    Agent communication session closed

      2012-02-09 17:28:43    I    #2812    Agent    Agent communication failed, result=-2400

      2012-02-09 17:28:43    I    #2812    Agent    Exponential retry in 1031 seconds, error=-2400(Unable to connect to ePO Server)

      2012-02-09 17:28:43    i    #2812    Agent    Agent will connect to the ePO Server in 17 minutes and 11 seconds.

      2012-02-09 17:30:57    I    #12832    Manage    DOMAIN\jbpierini disconnected from session 12

      2012-02-09 17:31:19    I    #12688    Manage    CManage::Logoff - DOMAIN\someuser1 logged off remotely.  Not enforcing policies.

      2012-02-09 17:31:19    I    #12688    Manage    DOMAIN\someuser1 logged off from session 5

      2012-02-09 17:32:15    I    #2884    Agent    Sending the next batch of immediate events

      2012-02-09 17:32:15    i    #2884    Agent    Agent is looking for events to upload

       

      **************************** END OF AGENT LOG **************************************

       

      Agent communication on required ports are all open and have been checked with Telnet. Reinstalling the Agent with /forceinstall fixes the issue, but it's an action we would like to avoid doing on all systems. BTW, IPv6 is not enabled on this server.

      I searched high and low for Failed to load certificate error and couldn't find reference on what it means or what would cause an agent to have an issue.

       

      I will be logging a support ticket, but thought I will post in here just in case someone seen this before.

       

      Thanks,

      Redouane

       

       

       

      on 10/02/12 03:42:42 CST