5 Replies Latest reply on Jul 17, 2014 12:52 PM by jlockie

    "sr2048pubkey.bin is invalid" Management Agent 4.6

    mcdave

      Hi,

       

      we use a logon script to deploy the management agent (V4.5)on all our computers (which worksperfectly for years).
      But now I bumped into issues. We've got 4 microsoft UAG servers on which I can install the agent but it refuses to make any kind of connection to the eopserver
      I can reach the computers from the eposerver & visa versa.
      So I thought I'll import MA 4.6 (Evaluation) (inclusive AgentKey updater & extention) into our repository and try that.
      I tried pushing this new client to those 4 Servers which fails.
      Then I successfully updated some clients from MA4.5 to MA 4.6.
      and afterwards I tried installing the agent manually onto the 4 servers (FramePkg.exe) the installation itself worked without any errors but they still wont communicate withe the eposerver?


      I saw in one of the install error logs "sr2048pubkey.bin is invalid" could that be a cause?

      But  then I also notised the same "sr2048pubkey.bin is invalid" message on the clients I've upgraded successfully to 4.6?

       

       

      FrmInst_UAGSERVER-XX_error.log:

       

      2012-08-24 18:56:05.340    E    #7240    SiteHlp    cfg    Error trace:
      2012-08-24 18:56:05.341    E    #7240    Thread    cfg     [Main thread]->
      2012-08-24 18:56:05.343    E    #7240    StSHlp    cfg     [modifying site list]->
      2012-08-24 18:56:05.345    E    #7240    SiteHlp    cfg      C:\Users\AdminX\AppData\Local\Temp\{1995804A-B1A2-4826-99DD-CEA1352D090B}\sr2048pubkey.bin is invalid
      

       

       

      Someone bumped into the same issue, is this normal, how to fix it?

       

      regards

      Dave

        • 1. Re: "sr2048pubkey.bin is invalid" Management Agent 4.6
          mcdave

          Still facing this issue

           

          here is a full error log

           

           

          2013-08-22 13:45:02    E    #31600    RegKey    Ins    Error trace:

          2013-08-22 13:45:02    E    #31600    Thread    Ins     [Main thread]->

          2013-08-22 13:45:02    E    #31600    Setup    Ins     [Attempting to perform a setup operation]->

          2013-08-22 13:45:02    E    #31600    RegKey    Ins     [RegOpenKeyEx,80000002,SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\EPOAGENT3000]->

          2013-08-22 13:45:02    E    #31600    RegKey    Ins      error 2: The system cannot find the file specified.

          2013-08-22 13:45:23    E    #31988    SiteHlp    cfg    Error trace:

          2013-08-22 13:45:23    E    #31988    Thread    cfg     [Main thread]->

          2013-08-22 13:45:23    E    #31988    StSHlp    cfg     [modifying site list]->

          2013-08-22 13:45:23    E    #31988    SiteHlp    cfg      C:\WINDOWS\TEMP\{1995804A-B1A2-4826-99DD-CEA1352D090B}\sr2048pubkey.bin is invalid

          2013-08-22 13:45:23    E    #31988    MfeCryptC    cfg    Error trace:

          2013-08-22 13:45:23    E    #31988    MfeCryptC    cfg      Failed to load the key , 10001

          2013-08-22 13:45:23    E    #31988    MfeCryptC    cfg   

          2013-08-22 13:45:23    E    #31988    Cryptshim    cfg    Error trace:

          2013-08-22 13:45:23    E    #31988    Cryptshim    cfg      Failed to import the key type 2  , 1

          2013-08-22 13:45:23    E    #31988    msacfg    cfg    Error trace:

          2013-08-22 13:45:23    E    #31988    msacfg    cfg      Failed to import the server public key

          2013-08-22 13:45:34    E    #31600    Setup    Ins    Error trace:

          2013-08-22 13:45:34    E    #31600    Thread    Ins     [Main thread]->

          2013-08-22 13:45:34    E    #31600    Setup    Ins     [Attempting to perform a setup operation]->

          2013-08-22 13:45:34    E    #31600    Setup    Ins     [Run MSI]->

          2013-08-22 13:45:34    E    #31600    Setup    Ins      error 1603: Fatal error during installation.

          2013-08-22 13:45:34    E    #31600    UI    Ins    Error trace:

          2013-08-22 13:45:34    E    #31600    Thread    Ins     [Main thread]->

          2013-08-22 13:45:34    E    #31600    UI    Ins      Fatal error during installation.

           

          Update: A manual unsinstall as described in the following KB doesn't help: http://kc.mcafee.com/corporate/index?page=content&id=KB65863&actp=search&viewloc ale=en_US&searchid=1372958349687

           

           

           

           

          Message was edited by: mcdave on 22/08/13 06:54:18 CDT

           

          Message was edited by: mcdave on 22/08/13 08:20:59 CDT
          • 2. Re: "sr2048pubkey.bin is invalid" Management Agent 4.6
            Tristan

            When you followed the KB entry did you follow solution 1 or solution 2?

            • 4. Re: "sr2048pubkey.bin is invalid" Management Agent 4.6
              Tristan

              https://kc.mcafee.com/corporate/index?page=content&id=KB73389

               

              You could try the' Installing the agent with user-selected site information and user-selected keys' instructions from the KB entry above to export keys from ePO and manual specifiy the keys during the install.

               

              If it comes up with the same error then i would hazard a guess that it's a result of UAG (Microsoft TMG family product) which is basically a firewall.

               

              Have you tried disabling all firewall functionality to see if it makes a difference.

              • 5. Re: "sr2048pubkey.bin is invalid" Management Agent 4.6
                jlockie

                Just FYI, I had the same line in the log file

                 

                [RegOpenKeyEx,80000002,SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\EPOAGENT3000]->

                 

                I turned disabled the Windows Firewall Service and auto-magically the agent installed fine.  Go figure. Thanks!