MCAFEE: Unable to update AMCORE with Mcafee Agent 5.0.4 after ENS 10.2 to 10.5.1 Migration

Event 1119, Unable to update AMCORE Content and Scan Module with Mcafee Agent 5.0.4 after ENS 10.2 to 10.5.1 Migration

Setup:

Customer had a running and working EPO 5.3.2 in German client environment.

What was done?

During a migration scenario with Agent 5.0.4 and ENS 10.2 we wanted to update to ENS 10.5.1.

Error:

After the Update for the "Platform" and "Endpoint security Threat Prevention" we had following problems:

• AMCORE Content did not update > By Task > By Enduser GUI "Jetzt Aktualisieren" "Update Now" turned RED
• Error on German Clients: Fehler bei der Aktualisierung. Siehe Ereignisprotokoll, Event ID: 1119
• Downloading file from https://eposerver006:443/Software/SiteStat.xml?hash={15bbaf26-2e42-16e7-37b9-8be54700e4e7} to C:\Windows\TEMP\SiteStat.xml failed. (Manuel open of XML in browser worked fine)
• Migration from 10.2 > 10.5.1 > Clients needed to reboot 1-2 times to get the second part "Threat Prevention running. That may be by design for 10.2 to 10.5.1 but we had other cases where this worked (This seems to be how it is EVEN with Framework 5.0.5). We had one customer where this worked in ONE during a 10.2 to 10.5 RTM migration.

   

  AMCONTENT Version stays at 0.5

Solution Event 1119

We could solve this in Upgrading the Mcafee Framework Agent from 5.0.4 to 5.0.5 RTM (5.0.5.6585.0.5.658). This is filled under Mcafee 1156417. This even when the 10.5.1 ENS is already on the client and the client is in that stalled MODUS where he does not update AMCORE Content.

5.0.4.400 (Hotfix not seen in Software Updater of EPO) did not solve it.

This is the config we had:

5.0.4.283

10.2.0.619

10.2.0.620

This is the Config all was working fine afterwards:

5.0.5.658

This is what's wrong:

This we talk about in EPO after we updated to Agent 5.0.5

Errors we did see on clients:

Error seen on EPO:

Text: Fehler bei der Aktualisierung. Siehe Ereignisprotokoll.

Event ID: 1119

This is wher you could see in GUI that something is not working. When you PRESS Update NOW button it turned RED.