2 Replies Latest reply on Jan 15, 2016 6:38 AM by mcdave

    Failing Agent deployment tasks

    mcdave

      The deployment of the McAfee agent fails on some of our Macs

      1/14/16 11:48:31 AM   Starting deployment to computer <NameOfMacSystem> through the Agent Handler <NameOfAgentHandler>
      1/14/16 11:48:31 AM   SSH Output: Looking up host "<NameOfMacSystem>"
      1/14/16 11:48:31 AM   SSH Output: Connecting to <IPaddrOfMacSystem> port 22
      1/14/16 11:48:31 AM   SSH Output: Server version: SSH-2.0-OpenSSH_6.9
      1/14/16 11:48:31 AM   SSH Output: Using SSH protocol version 2
      1/14/16 11:48:31 AM   SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871
      1/14/16 11:48:31 AM   SSH Output: Doing Diffie-Hellman group exchange
      1/14/16 11:50:30 AM   SSH Output: Server unexpectedly closed network connection
      1/14/16 11:50:30 AM   SSH Output: Fatal: Server unexpectedly closed network connection
      1/14/16 11:50:30 AM   Error copying file C:\Windows\TEMP\mfe101606000.tmp\install.sh to <NameOfMacSystem>, system error: 1

       

      The used account for the deployment does work perfectly (can successfully create an ssh connetion with putty)

      The only working workarround atm is installing the agent manually

       

      Any idea what the issue could be and how to resolve it?

       

      We're using ePO 5.3.1 & Agent 5.0.2.185

       

      Regards,

      Dave

        • 1. Re: Failing Agent deployment tasks
          mcdave

          It looks like the deployment task event doesn't try to logon to the Mac, as when I deliberately provide wrong credentials it still generates the exact same log output as above???

          • 2. Re: Failing Agent deployment tasks
            mcdave

            Cause found & resolved (workarround) https://kc.mcafee.com/agent/index?page=content&id=KB86193

             

             

            Cause

            ePO uses standard tools to deploy the McAfee Agent to non-Windows systems: PuTTY and PSCP to copy the installation files to the remote client.

            The version of PSCP bundled with all versions of ePO is outdated. Agent deployment fails during the key exchange because of security changes in the later versions of the SSH server pre-installed on MAC OS X clients.

             

             

            Solution

            This issue will be resolved in a future release of ePO. As a temporary measure, implement the following workaround.

             

             

            Workaround

            Manually replace the PSCP executable that ePO uses to initiate the file transfer.

             

            1. Download the latest version of PSCP from PuTTY's site: www.putty.org.
            2. Back up the original pscp.exe located in the root of the ePO installation directory.
            3. Replace the original pscp.exe with the latest version downloaded from PuTTy's site.
            4. Re-attempt an agent deployment to a Mac OS X 10.11 system.