How To reset Agent GUID for linux

[Dwee]

we have more than 10 cloned linux server VM's,  and the result was the client machines wont displayed on epo console,

is there a way to fix this ? a way that doesn't need to reboot the machine, 

thx

[Pravas]

Hi @Dwee ,

I see your question is related to Trellix Agent. Let me move the post to the appropriate thread.

Thanks

[MarcinK · Accepted solution]

Hello,

Log on each the server and run command: maconfig -enforce -noguid. After the command restart mcafee agent service. And done.

Best Regards

[Dwee]

is there any kb about this ? because i need for linux servers and windows servers, our client wants that the original VM's still powered on at the old site (DC), but the cloned ones also powered on at the the site (new DC) at the same time 

[cdinet]

How to include McAfee Agent 5.x on an image

Technical Articles ID:   KB84356

[Dwee]

wait which one that fits for my situation ? do i just need to run the "maconfig -enforce -noguid"? or Delete the registry value TSDeviceID in the registry key HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVSolution\Install_Reference. ??

as you know that on my situation mostly the windows and linux server that both the original and cloned vm's servers have status online both of them and they want to avoid server reboot/os restart,

[cdinet]

use the noguid option.

[cdinet]

Do not delete any registry entries.

[MarcinK]

A long time ago I used: reg delete "HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent" /va /f and it worked. Server got new guid agent.

[cdinet]

With the newer agents, the agent uses the info stored in the ma.db encrypted files instead of some registry listings, which is why we no longer say to delete the registry items.  The maconfig command should be used instead.