Update Error

[tmelville]

Hi All:
I have been encountering an issue I'm trying to solve.

Firstly, I deploy the Agent, version 5.6.1.157. No issues, this install is successful.

Then I deploy ENS Platform 10.6.1124 and ENS Threat Prevention 10.6.1.1208. These tasks also finish successfully.

When I try to run an update to versions 10.6.1.1550/10.6.1.1449 the final "LED" bar is red/failed.

After I run an Agent wakeup however, EPO shows that the clients have the newest versions installed.

What log would I check for clues on this? The recent McAfee webinar had me thinking it may be a certificate issue. I worked w McAfee support and they said to hold off on doing anything in the recently promoted certificate KB and to troubleshoot this issue individually first. ENS is working and reporting to EPO. We recently did a phishing test (w/ PDF attachments in an email) and the users who opened the PDF did trigger McAfee alerts. I am on EPO 5.10 Update 4.

[tmelville]

I should add all of our clients are Windows 10 Enterprise x64 v1803.

[cdinet · Accepted solution]

Why are you using run client task now for that? Set up an assigned client update task instead to run the update. As for what logs to look at, the server log for epo or agent handler that sent the task to client should show something. Masvc log on the client will show it receiving and running the task, where mcscript log would show it getting files from repository and invoking the setup. If it gets to the setup part, then you would go to the install log for the patch. You might want to go through this article. https://community.mcafee.com/t5/ePolicy-Orchestrator/HOW-TO-TROUBLESHOOT-CLIENT-UPDATE-DEPLOYMENT-FA...

[tmelville]

I will attempt this morning to try the assigned client task method. Attached are some screenshots detailing what is happening. The initial deployment of ENS works fine. The update shows almost like a duplicate install attempt.

[cdinet]

The only real way to know what is happening is looking at the mcscript and mcscript deploy logs as well as the point product install logs.

[tmelville]

Sorry for the delay. I created a new VM w Win10 then snapshotted it. This way for further troubleshooting I can revert to the base snapshot and reinstall as needed.

I installed the Agent then deployed ENS = successfully as normal.

I then made a 'Lab' folder in the system tree, and assigned a client task to it to update any machines in that folder. I put the VM in that folder then used the Agent Monitor to check for policies. It noted the assigned task ran the updates. The software did get installed OK like before. If you have Sublime (or similar text editor) that does line numbering, the error occurs at line 6013. Log on my OneDrive here: https://1drv.ms/u/s!Av0WbD2LJ1ArjQFPpCoUBh5kCq7O?e=lZuKZx

[cdinet]

We are blocked from downloading external content like that, so I can't get your log file. I will send you my contact info.