ePO 5.10 Service Pack 1 Update (ePO 5.10 SP1 CU):

[SelsKurt]

As a short answer
The upgrade will fail then rollback is announced. But no service will restart. i can restart manually two of them but the third one (Apache) will display an error when restarted and will be deleted if i reboot.

As a partner i can't promote the epo upgrade to my customers in such a state. And its becoming a bad behavior on your side. Agent is published then reposted. Ens ? the same ! ePO ? the same. Where are the customers beta and RC programs that were common when McAfee ? i was part of those during years to identify bugs. Nothing proposed since becoming Trellix. Quality management ? looks like far behind...

i also tested the repair process on another ePO to switch from SP1 to SP1 repost as documented but with also a failed status. (rollback is ok on that one).

[cdinet]

I don't know what happened with the beta program, that is something I will look into.  For apache, the originally released sp1, when rolled back, would leave the epo named services listed in the registry as well as have the mcafee named ones.  Check the registry in services to see if you have both and non-sp1 system should not have one named epo.  That can prevent the service from starting because it doesn't know which one to use.  That can be fixed without having to reinstall any service.  One of them should be marked for deletion, but not sure which.  

[SelsKurt]

this doesnt explain the fail of the upgrade process before the process touch the services..you have two issues i think like i tried to explain a few weeks before to the support. 

for our customers we will need precise instructions for this issue if the repost is not solving it. It has to be documented officially in a KB that we can use in our communication. 

[cdinet]

That is pretty vague, as there are any number of things that can go wrong.  If you have sr numbers to clarify, please send them to me in private chat.

[cdinet]

Here is why it can't start and is part of the issue where rollback didn't revert the services back to mcafee instead of epo.

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MCAFEEAPACHESRV]
"Type"=dword:00000010(16)
"Start"=dword:00000002(2)
"ErrorControl"=dword:00000001(1)
"ImagePath"=""C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Apache2\bin\Apache.exe" -k runservice"
"DisplayName"="Trellix ePolicy Orchestrator 5.10.0 Server"
"DependOnService"="Afd Tcpip MCAFEETOMCATSRV5100"
"WOW64"=dword:0000014C(332)
"ObjectName"="LocalSystem"
"Description"="Apache/2.4.54 (Win32) OpenSSL/1.0.2zf-fips"
"DelayedAutostart"=dword:00000000(0)

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EPOTOMCATSRV5100]
"Type"=dword:00000010(16)
"Start"=dword:00000002(2)
"ErrorControl"=dword:00000001(1)
"ImagePath"="C:\PROGRA~2\McAfee\EPOLIC~1\Server\bin\tomcat9.exe //RS//EPOTOMCATSRV5100"
"DisplayName"="Trellix ePolicy Orchestrator 5.10.0 Application Server"
"DependOnService"="Tcpip Afd"
"ObjectName"="LocalSystem"
"Description"="Trellix ePolicy Orchestrator 5.10.0 Application Server services."

Delete

[cdinet]

That can be remediated by editing the depend on service name.

[ree5g]

Who has deployed SP1 Refresh successfully? I don't have test epo so looking for confidence before pulling the trigger .. 

[EdNapierIS]

I'm in the same boat. I can take a snapshot and a DB backup but need confidence the upgrade will work.

ePIP is currently saying that "no upgrade path is supported for this trellix epo version" when I run it, and I'm on 5.10.0 u15

[cdinet]

Epip is for version upgrade checks, it is not used for CU updates, so that would be a normal message.  When you first run the updater, it will show you if there are any extension compatibilities.

[SWISS]

Who has deployed SP1 Refresh successfully? I don't have test epo so looking for confidence before pulling the trigger ..

06.06.2023

1 small customer > SP1-Repost > OK, Download yesterday 05.06.2023

1 Larger customer with DLP/TIE/ATD/DXL/MSME full range > FAIL today, BEFORE Update > System 100% fine, SQL-INDEX OK, DB not too big, all optimized and stable.