4 Replies Latest reply: Aug 17, 2013 10:18 AM by Manish KS RSS

    Need help deploying McAfee Agent 4.8 through ePO

    jgarces

      I just finished updating our ePO server to 4.6.6. and than migrating it to a windows 2008 64 bit server from server 2003 64 bit.  Everything is working fine except when I try and deploy the new 4.8 agent to some systems. All of our systems are running agent 4.5 with VSE 8.7 which was all deployed when ePO was first deployed at our company about 2 years ago.

       

      The first system i tried to deploy the new 4.8 agent too gave me the following errors:

       

      8/14/13 3:54:49 PMStarting deployment to computer <computername> through the Agent Handler <ePOagenthandler>
      8/14/13 3:54:49 PMFailed to access remote system registry, system error: The network path was not found.
      8/14/13 3:54:49 PM

      Deploy agent installation package to target system was successful

       

      But it seemed to deploy the agent just fine and it installed it.

       

      The second system that I tried  to deploy the new 4.8 agent too gave me the following errors:

       

      8/14/13 4:23:11 PMStarting deployment to computer <computername> through the Agent Handler <ePOagenthandler>
      8/14/13 4:23:11 PMFailed to authenticate with remote system, system error: The network path was not found.
      8/14/13 4:23:11 PMFailed to authenticate with remote system, system error: The network path was not found.
      8/14/13 4:23:11 PMFailed to access remote system registry, system error: The network path was not found.
      8/14/13 4:23:11 PMDeploy agent installation package to target system was successful

       

      It did not install the agent on this machine at all.

       

      I than created a client task to push out the new VSE 8.8 to the machine that had the new agent on it.  That all worked fine.

       

      I have looked through the following thread https://community.mcafee.com/message/43478 and made sure that I can access the \\MACHINENAME\Admin$ from the ePO server and create folders and files.  I have also verified firewall rules on this machine and made sure that file and print sharing was enabled.

       

      Any other ideas?  I have about 50 machines that I need to deploy too and would like for ePO to the deployments.

       

      Thanks, Johan

        • 1. Re: Need help deploying McAfee Agent 4.8 through ePO
          Manish KS

          Hi Johan,

           

          According to above above logs I can suggest you to refer McAfee article KB66747. hopefully the issue will get resolve.

           

          And in second log I can see one more error "Failed to authenticate with remote system" It means the credential which you are using to deploy the agent is not having local admin right on that machine. Please make sure you have one common username and password for all the machines which will have local admin rights on those machine where you want to deploy the agent.

           

          http://kc.mcafee.com/corporate/index?page=content&id=KB66747

           

           

          Thanks,

          Manish.

          • 2. Re: Need help deploying McAfee Agent 4.8 through ePO
            jgarces

            Manish,

             

            I read through the KB66747 article you listed and followed the steps in it.  I don't believe that is my problem.  After adding the AD admin account to the security policy on the server, I still got the same errors as before.  I went through and looked at the server.log file and found the following lines from deploying the agent.

             

            20130816151112          E          #04540          NAIMSRV           Failed to authenticate to \\Client1, err=53

            20130816151112          E          #04540          NAIMSRV           Failed to authenticate to \\Client1, err=53

            20130816151113          I          #04540          NAIMSRV           Successfully authenticated to \\Client1\ADMIN$

            20130816151113          I          #03688          mod_eporepo          Received request, uri=/Software/Current/EPOAGENT3000/Install/0409/PkgCatalog.z, remoteIP=::1

            20130816151113          I          #03684          mod_eporepo          Received request, uri=/Software/Current/EPOAGENT3000/Install/0409/FramePkg.exe, remoteIP=::1

            20130816151113          I          #04540          NAIMSRV           Pushing agent install, source:Current/EPOAGENT3000/Install/0409, target system: Client1, target path: <PROGRAM_FILES_DIR>\McAfee\Common Framework

            20130816151114          I          #04540          NAIMSRV           Copy C:\Windows\TEMP\mfe528671.tmp\FramePkg.exe to \\Client1\ADMIN$\FramePkg.exe Successfully

            20130816151135          I          #04540          NAIMSRV           Push Agent Install parameter: FramePkg.exe  /Install=Agent /Silent /InstDir="<PROGRAM_FILES_DIR>\McAfee\Common Framework"

            20130816151136          I          #04540          NAIMSRV           Push Agent Installation Program to Client1 was successful

             

            So it fails to authenticate to the machine, but it successfully authentiates to ADMIN$ on the machine.  And it seems that it is copying the file to the correct location and reports that the installation was succesful.  But it never actually installs the new version on the machine.

             

            Any more ideas? 

             

            Thanks, Johan

            • 3. Re: Need help deploying McAfee Agent 4.8 through ePO
              jgarces

              As an update, I have the setup logs from the computer that fails to install the agent.  Sorry for the long log file, but it shows where the installer runs into trouble.  Please help if you've seen this before.

               

              2013-08-16 15:22:34.717          I          #2512          Stub          Pkg

              2013-08-16 15:22:34.717          I          #2512          Stub          Pkg          START [FramePkg.exe  /Install=Agent /Silent /InstDir="<PROGRAM_FILES_DIR>\McAfee\Common Framework"]

              2013-08-16 15:22:34.718          I          #2512          Common          Pkg          CreateDirectory (C:\Windows\TEMP\mfeBA8B.tmp)

              2013-08-16 15:22:35.105          I          #2808          Common          Pkg          CreateProcess (C:\Windows\TEMP\mfeBA8B.tmp\FrmInst.exe, /Install=Agent /Silent /InstDir="<PROGRAM_FILES_DIR>

               

               

              \McAfee\Common Framework" /FramePkg /OriginalFramePkg="C:\Windows\FramePkg.exe" /Cleanup="C:\Windows\TEMP\mfeBA8B.tmp" /LOGDIR="C:\Windows\TEMP\McAfeeLogs"

               

               

              /EmbeddedUsername="" /EmbeddedDomain="" /EmbeddedPassword="")

              2013-08-16 15:22:35          I          #5640          Setup          Ins          START [/Install=Agent /Silent /InstDir="<PROGRAM_FILES_DIR>\McAfee\Common Framework" /FramePkg

               

               

              /OriginalFramePkg="C:\Windows\FramePkg.exe" /Cleanup="C:\Windows\TEMP\mfeBA8B.tmp" /LOGDIR="C:\Windows\TEMP\McAfeeLogs" /EmbeddedUsername="" /EmbeddedDomain=""

               

               

              /EmbeddedPassword=""]

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Windows 6.1.7601 Service Pack 1

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Running as System account, therefore no UI

              2013-08-16 15:22:35          I          #5640          msiFix          Ins          Finding agent MSI product code

              2013-08-16 15:22:35          I          #5640          msiFix          Ins          Got MSI product code {B639A4DE-A375-47D3-89C3-DDCF98D992F7}

              2013-08-16 15:22:35          I          #5640          msiFix          Ins          Finding agent MSI version

              2013-08-16 15:22:35          I          #5640          msiFix          Ins          Got agent MSI version 4.5.0057

              2013-08-16 15:22:35          I          #5640          msiFix          Ins          Nothing to fix for this agent version

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Attempting to perform a setup operation

              2013-08-16 15:22:35          I          #5640          Cmalib          Ins          Referencer 1 VIRUSCAN8700

              2013-08-16 15:22:35          I          #5640          caShrLb          Ins          Installed version=4.5.0.1270

              2013-08-16 15:22:35          I          #5640          caShrLb          Ins          Product count=1

              2013-08-16 15:22:35          I          #5640          caShrLb          Ins          Managed mode=1

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Legacy installed=0

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Installing version=4.8.0.887

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Higher version installed=0

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Existing Installed Path=C:\Program Files\McAfee\Common Framework

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Existing Data Path=C:\ProgramData\McAfee\Common Framework

              2013-08-16 15:22:35          I          #5640          Setup          Ins          Existing setup program=C:\Program Files\McAfee\Common Framework\frminst.exe

              2013-08-16 15:22:35          I          #5640          Setup          Ins          LangInRegistry=[0409]

              2013-08-16 15:22:35          I          #5640          OptSet          Ins          /instdir ignored, product is already installed

              2013-08-16 15:22:35          I          #5640          Setup          Ins          C:\Windows\system32\msiexec.exe /i "C:\Windows\TEMP\mfeBA8B.tmp\MFEagent.msi" ADDLOCAL=Main,Agent

               

               

              TRANSFORMS=:1033.mst /q REBOOT=R /l+*v "C:\Windows\TEMP\McAfeeLogs\MFEagent.msi.2013.08.16.15.22.35.log" SITEINFO="C:\Windows\TEMP\mfeBA8B.tmp\SiteList.xml"

               

               

              PRESERVEREPOSITORIES=True USELANGUAGE="0409" FRMINSTLOGFILE="C:\Windows\TEMP\McAfeeLogs\FrmInst_6R4YPH1"

              2013-08-16 15:22:36.619          I          #2808          Stub          Pkg          Running as a service, therefore not waiting for installation to complete

              2013-08-16 15:22:36.619          I          #2512          Stub          Pkg          END 0

              2013-08-16 15:23:21.025          I          #5676          msacfg          cfg          Install site list,C:\Windows\TEMP\{1FDB8EC6-BAF1-42F9-8E09-4D9AB369F1B5},1

              2013-08-16 15:23:21.030          I          #5676          Cryptshim          cfg          Initializing crypto library

              2013-08-16 15:23:21.032          I          #5676          Cryptshim          cfg          Using C:\ProgramData\McAfee\Common Framework\keystore as keystore path

              2013-08-16 15:23:21.034          I          #5676          Cryptshim          cfg          Using C:\Program Files\McAfee\Common Framework\msaconfig.sig as exe signature file path

              2013-08-16 15:23:21.148          I          #5676          MfeCryptC          cfg          RSA version : NIST Library Version 2.1.0.0

              2013-08-16 15:23:21.150          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.151          I          #5676          MfeCryptC          cfg          RSA crypto role : User Role

              2013-08-16 15:23:21.152          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.153          I          #5676          MfeCryptC          cfg          RSA crypto mode : NON-FIPS Mode

              2013-08-16 15:23:21.154          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.203          I          #5676          Cryptshim          cfg          Successfully initialized crypto library

              2013-08-16 15:23:21.206          I          #5676          Cmalib          cfg          Referencer 1 VIRUSCAN8700

              2013-08-16 15:23:21.209          E          #5676          Xml          cfg          Error trace:

              2013-08-16 15:23:21.210          E          #5676          Thread          cfg           [Main thread]->

              2013-08-16 15:23:21.211          E          #5676          Cmalib          cfg           [Update manifest product count]->

              2013-08-16 15:23:21.212          E          #5676          Xml          cfg            Exception writing file: Couldn't open to write: Permission denied

              2013-08-16 15:23:21.216          I          #5676          caShrLb          cfg          Installed version=4.8.0.887

              2013-08-16 15:23:21.217          I          #5676          caShrLb          cfg          Product count=0000000000

              2013-08-16 15:23:21.218          I          #5676          caShrLb          cfg          Managed mode=1

              2013-08-16 15:23:21.221          I          #5676          stlscfg          cfg          Replacing SPIPE site in site list only

              2013-08-16 15:23:21.226          E          #5676          SiteHlp          cfg          Error trace:

              2013-08-16 15:23:21.227          E          #5676          Thread          cfg           [Main thread]->

              2013-08-16 15:23:21.229          E          #5676          StSHlp          cfg           [modifying site list]->

              2013-08-16 15:23:21.230          E          #5676          SiteHlp          cfg            Can't write C:\ProgramData\McAfee\Common Framework\SiteList.xml

              2013-08-16 15:23:21.232          I          #5676          Thread          cfg          Exit program

              2013-08-16 15:23:21.233          I          #5676          msacfg          cfg          Calling ImportKeys  with bJustkeys = 0

              2013-08-16 15:23:21.235          I          #5676          msacfg          cfg          Upgrading from MA 4.5 or lower

              2013-08-16 15:23:21.237          I          #5676          msacfg          cfg          Initializing in NON-FIPS mode

              2013-08-16 15:23:21.238          I          #5676          msacfg          cfg          Setting the key size to be used as Lower 1024 bits

              2013-08-16 15:23:21.239          I          #5676          msacfg          cfg          Expecting these key files: C:\ProgramData\McAfee\Common Framework/srpubkey.bin, C:\ProgramData\McAfee\Common

               

               

              Framework/reqseckey.bin

              2013-08-16 15:23:21.244          I          #5676          msacfg          cfg          existing crypto mode is 2 (fips=0, fips_ssl=1, non_fips=2,...)

              2013-08-16 15:23:21.246          I          #5676          msacfg          cfg          Trying to re-initialize crypto libraries.

              2013-08-16 15:23:21.248          I          #5676          Cryptshim          cfg          Released key data successfully

              2013-08-16 15:23:21.249          I          #5676          Cryptshim          cfg          Initializing crypto library

              2013-08-16 15:23:21.251          I          #5676          Cryptshim          cfg          Using C:\ProgramData\McAfee\Common Framework\keystore as keystore path

              2013-08-16 15:23:21.253          I          #5676          Cryptshim          cfg          Using C:\Program Files\McAfee\Common Framework\msaconfig.sig as exe signature file path

              2013-08-16 15:23:21.368          I          #5676          MfeCryptC          cfg          RSA version : NIST Library Version 2.1.0.0

              2013-08-16 15:23:21.370          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.371          I          #5676          MfeCryptC          cfg          RSA crypto role : User Role

              2013-08-16 15:23:21.372          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.373          I          #5676          MfeCryptC          cfg          RSA crypto mode : NON-FIPS Mode

              2013-08-16 15:23:21.374          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.422          I          #5676          Cryptshim          cfg          Successfully initialized crypto library

              2013-08-16 15:23:21.423          I          #5676          msacfg          cfg          Successfully re-initialized crypto libraries.

              2013-08-16 15:23:21.426          I          #5676          Cryptshim          cfg          Successfully released key data

              2013-08-16 15:23:21.427          I          #5676          MfeCryptC          cfg          Successfully freed key item

              2013-08-16 15:23:21.428          I          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.430          E          #5676          MfeCryptC          cfg          Error trace:

              2013-08-16 15:23:21.431          E          #5676          MfeCryptC          cfg            Failed to open keystore file

              2013-08-16 15:23:21.432          E          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.433          E          #5676          MfeCryptC          cfg          Error trace:

              2013-08-16 15:23:21.434          E          #5676          MfeCryptC          cfg            Unable to lock key file

              2013-08-16 15:23:21.435          E          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.436          E          #5676          MfeCryptC          cfg          Error trace:

              2013-08-16 15:23:21.437          E          #5676          MfeCryptC          cfg            Writing into keystore failed

              2013-08-16 15:23:21.439          E          #5676          MfeCryptC          cfg

              2013-08-16 15:23:21.440          E          #5676          Cryptshim          cfg          Error trace:

              2013-08-16 15:23:21.441          E          #5676          Cryptshim          cfg            Failed to import the key type 2  , 1

              2013-08-16 15:23:21.442          I          #5676          Cryptshim          cfg          Released key data successfully

              2013-08-16 15:23:21.443          E          #5676          msacfg          cfg          Error trace:

              2013-08-16 15:23:21.444          E          #5676          msacfg          cfg            Failed to import the server public key

              2013-08-16 15:23:21.446          I          #5676          msacfg          cfg          END 16

              2013-08-16 15:23:44          E          #5640          Setup          Ins          Error trace:

              2013-08-16 15:23:44          E          #5640          Thread          Ins           [Main thread]->

              2013-08-16 15:23:44          E          #5640          Setup          Ins           [Attempting to perform a setup operation]->

              2013-08-16 15:23:44          E          #5640          Setup          Ins           [Run MSI]->

              2013-08-16 15:23:44          E          #5640          Setup          Ins            error 1603: Fatal error during installation.

              2013-08-16 15:23:44          E          #5640          UI          Ins          Error trace:

              2013-08-16 15:23:44          E          #5640          Thread          Ins           [Main thread]->

              2013-08-16 15:23:44          E          #5640          UI          Ins            Fatal error during installation.

              2013-08-16 15:23:44          I          #5640          Thread          Ins          Exit program

              2013-08-16 15:23:44          I          #5640          Setup          Ins          END 1603

              2013-08-16 15:23:44.920          I          #6080          Main          Cle

              2013-08-16 15:23:44.920          I          #6080          Main          Cle          START [5612 /LOGDIR="C:\Windows\TEMP\McAfeeLogs" "C:\Windows\TEMP\mfeBA8B.tmp"]

              2013-08-16 15:23:44.920          I          #6080          Common          Cle          WaitForSingleObject (calling FrmInst.exe, 30000)

              2013-08-16 15:23:44.955          I          #6080          Main          Cle          Delete on reboot: C:\Windows\TEMP\mfeBA8B.tmp\cleanup.exe

              2013-08-16 15:23:44.965          I          #6080          Main          Cle          Delete on reboot: C:\Windows\TEMP\mfeBA8B.tmp

              2013-08-16 15:23:44.965          I          #6080          Main          Cle          END 0

               

               

              Thanks, Johan

              • 4. Re: Need help deploying McAfee Agent 4.8 through ePO
                Manish KS

                Hi Johan,

                 

                Thanks for sharing the logs.

                 

                Looking into above logs we can confirm that the McAfee agent installation package is being delivered on the client machine but the issue occures while running the setup file. From the above log I can see below error while installation:

                 

                2013-08-16 15:23:21.209          E          #5676          Xml          cfg          Error trace:

                2013-08-16 15:23:21.210          E          #5676          Thread          cfg           [Main thread]->

                2013-08-16 15:23:21.211          E          #5676          Cmalib          cfg           [Update manifest product count]->

                2013-08-16 15:23:21.212          E          #5676          Xml          cfg            Exception writing file: Couldn't open to write: Permission denied

                 

                 

                2013-08-16 15:23:44          E          #5640          Setup          Ins          Error trace:

                2013-08-16 15:23:44          E          #5640          Thread          Ins           [Main thread]->

                2013-08-16 15:23:44          E          #5640          Setup          Ins           [Attempting to perform a setup operation]->

                2013-08-16 15:23:44          E          #5640          Setup          Ins           [Run MSI]->

                2013-08-16 15:23:44          E          #5640          Setup          Ins            error 1603: Fatal error during installation.

                2013-08-16 15:23:44          E          #5640          UI          Ins          Error trace:

                2013-08-16 15:23:44          E          #5640          Thread          Ins           [Main thread]->

                2013-08-16 15:23:44          E          #5640          UI          Ins            Fatal error during installation.

                2013-08-16 15:23:44          I          #5640          Thread          Ins          Exit program

                2013-08-16 15:23:44          I          #5640          Setup          Ins          END 1603

                 

                 

                The error listed comes only when the account being used to install the framepkg.exe, or if frminst.exe is used with command line parameters, does not have local administrator privileges. The inability to open the registry with the Access is denied error confirms invalid permissions.

                 

                8/14/13 3:54:49 PMFailed to access remote system registry, system error: The network path was not found.


                8/14/13 4:23:11 PMFailed to access remote system registry, system error: The network path was not found.

                 

                To trouble shoot the issue I would suggest you to please create a Frampkg.exe package from the ePO server without using any crdential. Copy that FramePkg.exe on a local machine and run the setup.

                 

                There is chances to fail the installation as already installation have been perfomed and that was without success so there might be the existing agent currupted. If it get failed please use the command forceinstall.

                 

                Syntax :

                 

                C:\framepkg.exe /install=agent /forceinstall

                 

                Once it is successfull it confirm that the credential is being used to deploy the agent through ePO does not have local administrative privileges on the client machine.

                 

                So in agent deployment task use an account which has local administrative privileges and also check the option "Force install".

                 

                Thanks,

                Manish.