Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
This discussion is archived
4988 Views 8 Replies Latest reply: Feb 4, 2013 7:29 PM by zarberg RSS
zarberg Apprentice 117 posts since
Sep 2, 2010
Currently Being Moderated

Feb 1, 2013 1:57 PM

ePO Apache service will not start after 4.6 to 4.6.4 upgrade

Upgraded ePO following the documentation (https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/ 22000/PD22974/en_US/epo_460_install_guide_en-us.pdf) and after server restart, the McAfee ePolicy Orchestrator 4.6.4 Server service will not start. I get the following error:

 

"Windows could not start the McAfee ePolicy Orchestrator 4.6.4 Server on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 1."

 

When I check the system event log, it says the following:

 

"The McAfee ePolicy Orchestrator 4.6.4 Server service terminated with service-specific error Incorrect function.."

 

and under details:

 

"

-System

 



-Provider



[ Name] Service Control Manager



[ Guid] {555908d1-a6d7-4695-8e1e-26931d2012f4}



[ EventSourceName] Service Control Manager

 



-EventID7024

 




[ Qualifiers] 49152



Version0



Level2



Task0



Opcode0



Keywords0x8080000000000000


-TimeCreated

 




[ SystemTime] 2013-02-01T19:53:53.484924300Z



EventRecordID26974



Correlation


-Execution

 




[ ProcessID] 636



[ ThreadID] 1824



ChannelSystem



ComputerESEPO01.xxxx.xxx.xxxxx.xx.xx



Security
-EventData

 



param1McAfee ePolicy Orchestrator 4.6.4 Server


param2%%1

 

"

 

I'm very anxious to get this back up and running, so let me know if you need more info, and I'll do what I can.

  • JoeBidgood McAfee SME 2,868 posts since
    Sep 11, 2009

    Try and start the service again, and then check the latest errorlog in <epo install folder>\apache2\logs - does it show any errors?

     

    Thanks -

     

    Joe

     

    Message was edited by: JoeBidgood on 01/02/13 20:18:52 GMT



    (Please post questions to the forum, as I am unable to respond to private messages. Thanks!)



  • JoeBidgood McAfee SME 2,868 posts since
    Sep 11, 2009

    OK, that rules out some possibilities. Can you check the server.log in DB\logs for the same time? Any errors reported?

     

    Thanks -

     

    Joe




    (Please post questions to the forum, as I am unable to respond to private messages. Thanks!)



  • hem McAfee Employee 848 posts since
    Nov 18, 2009

    Is event parser services running? If not then looks the connectivity issue with DB. Are you able to validate \core\config page?

     

    --------------------

    Agent meta-data out of date, 9598278 > 9592914; resending.

    20130201142702          I          #06372          NAIMSRV           Sending props response for agent UIA07118, policy files attached (Policy\Server.xml)

    20130201142702          I          #06372          NAIMSRV           Signing agent response package with key 0UrK/pW6emBC1M2eBzeU+vhtBidFY8sdFdLG1fv0GbA=

    20130201142702          I          #07892          NAIMSRV           Received [Event] from UIA07118:{6E863CF9-938F-40AE-B0CD-EBC38C8FAC53}

    20130201142706          E          #05104          EPOLDAP           LDAP server cache has a reference count of -4499

    --------------------------


    Thanks
    Hem





More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points