8 Replies Latest reply on Aug 5, 2016 11:20 PM by taziegma

    Upgrade to VSE patch 7

    pradeepkumar0214

      Folks,

       

      We have initiated the Product update from the Client task to upgrade the VSE to Patch 7 from 6. But there is no progress of up gradation ?

       

      We have already checked in the latest version of MA(5.0.3.272) and VSE(8.8.0.1528) with latest extensions.

      AND

      The package existing on the client machines  are :

      MA version : 5.0.2.320 and 4.8.0.1938 

      VSE patch 6 : 8.8.0.1445

       

      How can i upgrade to latest versions

       

      Regards,

      PK

        • 1. Re: Upgrade to VSE patch 7
          tomz2

          Pradeep -

           

          Couple things you need to validate:

           

          1. To use a client update task to update VSE patches, you must first have the patch checked into the Master Repository. This is not the package labeled "repost." The repost package is the full installer for new installations. You can validate that you have the correct package checked in, by viewing your master repository and sorting on the Type column and looking for anything with Patch as a type and VSE with the product name and version being 7.

          2. Your client update task needs to be configured to actually download patches. In your client task that is assigned, validate that under patches and service packs, VirusScan Enterprise 8.8 is checked.

           

          If you want to do an immediate update of a system, use the Update Now feature on the Actions menu when selecting a system. By default, this will tell the agent to check for all packages and update any that are out of date.

           

          I would also suggest before installing Patch 7, that you follow the steps listed in McAfee KnowledgeBase - Intel Security - Security Bulletin: Protected resource access bypass vulnerability resolved in mu… to update correctly. Your 5.0.2 agents should be taken to 5.0.3.316 first, and then apply Patch 7, and subsequently the VSE Patch 6 / 7 hotfix.

          • 2. Re: Upgrade to VSE patch 7
            pradeepkumar0214

            Thank you Tom,

            As i have checked the master repository -
            1.We have checked-in both VSE patch7 install package and patch file too.  and version of Agent. (current Branch)

            Screen Shot 2016-07-15 at 12.16.32 AM.png

            Agent versions

            Screen Shot 2016-07-15 at 12.18.39 AM.png

             

            While update patch using Update Now feature its  "The task Update Now is freed "

            Screen Shot 2016-07-15 at 12.20.25 AM.png

            • 3. Re: Upgrade to VSE patch 7
              taziegma

              You have MA 5.0.3.272 listed. That build has issues. You need to download the MA 5.0.3 hotfix that takes the agent to .316 and try again. Also, check your McAfee Agent policy and confirm that the branches selected for patches and service packs for VSE match the branch that the patch is checked into.

              • 4. Re: Upgrade to VSE patch 7
                pradeepkumar0214

                Hello Taziegma,

                 

                MA policy had selected the current branch for Patch update.But there is no progress and when i do manually it shows " The task is freed "

                doesn't upgrade .We have all types of MA versions and VSE versions .

                Tried with client update task / client deployment task.  But no use of it.

                 

                How i can make them upgrade to latest versions which MA 5.0.3.272 and 8.8.0.1528. 

                • 5. Re: Upgrade to VSE patch 7
                  boschind

                  hello - where did u get hotfix .316 ?

                  forget my Q. got it from ePO SW Manager. :-)

                  • 6. Re: Upgrade to VSE patch 7
                    taziegma

                    Pradeep,

                     

                    As pointed out, 5.0.3.272 is *not* the latest version of the McAfee Agent. As boschind has mentioned, you can download the latest McAfee Agent via the ePO Software Manager or from the Product Download site using your grant number. I strongly advise updating the McAfee Agent to 5.0.3.316 and try the update again. If it fails, configure the system that it's failing on to have the McAfee Agent logs in debug mode, and see if those logs give any indication as to why its failing. Do you use Distributed Repositories? Has ePO synced the Master Repository content to the Distributed Repositories.

                     

                    From your screen shot, you are looking at the agent log via the browser. With the 5.x version of the agent, you will need to go to the second tab for additional logs. From there you can find the McScript log and masvc_computername logs. Those logs should point you in the right direction. Note that when they are in debug, they will get noisy, so it may take some time to sift through.

                     

                    Another thing that you mention is "we have all types of MA versions and VSE versions." To answer your question of how you can make them upgrade to the latest version is to upgrade anything running the 5.0.x McAfee Agent to 5.0.3.316, and anything running the 4.8.x Agent to 4.8.0.1938. Once the agent is updated, then you can push VSE 8.8 Patch 7 for new installs, or run Product Update tasks to update existing clients. You will also want to have the VSE 8.8 Patch 7 hotfix checked in as it resolves a some issues with AAC which is used by Access Protection. This is all documented in the KB article I mentioned above.

                     

                    If you're still having issues, then please contact Support and they can take a deeper look into your environment to find out why its not working.

                    1 of 1 people found this helpful
                    • 7. Re: Upgrade to VSE patch 7
                      pradeepkumar0214

                      Thanks for the immediate update.

                       

                      I have tried upgrading the 1. MA 5.0.2.320 to 5.0.3.316 by deployment task  and
                      2. upgrading the VSE 8.8.0.1445(MA 5.0.2.320) to 8.8.0.1528  through deployment task and
                      3. Upgrading the VSE8.8.0.1445(MA 5.0.2.320) to 8.8.0.1528 through patch update task

                       

                      but the agent logs shows

                      8/5/2016, 8:07:23 AMInfoahclientAgent communication session closed
                      8/5/2016, 8:07:23 AMInfoschedulerThe task McAfee Agent > Product Deployment is freed
                      8/5/2016, 8:07:22 AMInfoschedulerScheduler: Task [McAfee Agent > Product Deployment] is finished
                      8/5/2016, 8:07:22 AMInfoschedulerThe task McAfee Agent > Product Deployment is successful
                      8/5/2016, 8:07:12 AMInfoahclientAgent is connecting to ePO server
                      8/5/2016, 8:07:12 AMInfoahclientAgent communication session started
                      8/5/2016, 8:07:12 AMInfoDataChannel.ManagerSending the next batch of 1 data channel items
                      8/5/2016, 8:07:01 AMInfoschedulerNext time(local) of task Collect All: 2016-08-05 10:07:00
                      8/5/2016, 8:07:01 AMInfoschedulerThe task Collect All is successful
                      8/5/2016, 8:07:00 AMInfoschedulerThe task Collect All becomes active
                      8/5/2016, 8:07:00 AMInfoschedulerScheduler: Invoking task [Collect All]...
                      8/5/2016, 8:06:32 AMInfoschedulerScheduler: Invoking task [McAfee Agent > Product Deployment]...
                      8/5/2016, 8:06:32 AMInfo

                       

                       

                      8/5/2016, 8:04:22 AMInfoschedulerThe task Agent 5.0.3 is freed
                      8/5/2016, 8:04:20 AMInfoDataChannel.ManagerPackage uploaded to ePO Server successfully
                      8/5/2016, 8:04:20 AMInfoahclientAgent is connecting to ePO server
                      8/5/2016, 8:04:20 AMInfoDataChannel.ManagerSending the next batch of 1 data channel items
                      8/5/2016, 8:04:20 AMInfoschedulerThe task Agent 5.0.3 is successful
                      8/5/2016, 8:04:20 AMInfoahclientAgent communication session closed
                      8/5/2016, 8:04:20 AMInfoahclientAgent communication session started
                      8/5/2016, 8:04:20 AMInfoschedulerScheduler: Task [Agent 5.0.3] is finished
                      8/5/2016, 8:04:11 AMInfoahclientAgent communication session closed
                      8/5/2016, 8:04:11 AMInfoschedulerScheduler: Invoking task [Agent 5.0.3]...
                      8/5/2016, 8:04:11 AMInfoschedulerThe task Agent 5.0.3 becomes active
                      8/5/2016, 8:04:11 AMInfoahclientAgent communication session started
                      8/5/2016, 8:04:11 AMInfoDataChannel.ManagerPackage uploaded to ePO Server successfully
                      8/5/2016, 8:04:11 AMInfoDataChannel.ManagerSending the next batch of 1 data channel items
                      8/5/2016, 8:04:11 AMInfoahclientAgent is connecting to ePO server
                      8/5/2016, 8:04:08 AMInfoschedulerNext time(local) of task Agent 5.0.3: 2016-08-05 08:04:11

                       

                       

                      Both the task shows the task is freed .

                       

                      what is the mean for " the task is freed " ??

                       

                       

                      or do i need to raise request with McAfee support?

                      • 8. Re: Upgrade to VSE patch 7
                        taziegma

                        Pradeep,

                         

                        Based on your log snippet, the installation of McAfee Agent 5.0.3 was successful. However, it shows that 9 seconds after the task invoked. (Note that the agent log will say successful, but the installation may still be going on and services restarting as FramePkg.exe performs the update). Did the Agent update successfully to 5.0.3 on this system?

                         

                        The task is freed means that the task is finished. I'm going to suggest based on the data you've provided, that it would be best to contact support as they will have more visibility than I can via the forums.