Hi McAfee Community,

One of our customers is having issues installing ENS 10.6.1 on a Windows Server 2008 R2 VM.

It fails to install or upgrade from ePO (v5.9.1). We saw an error - Trust Verification failed in one of the logs, the Status Monitor if memory serves me correct.

The customer completely removed all McAfee products using the Endpoint Removal Tool and started from scratch - McAfee Agent 5.6.2.209 installed without issue.

When the customer attempts the Install locally, using the Standalone ENS Package by running SetupEP.exe as an Administrator it appears to do nothing whatsover. No CPU activity, no errors, nada.

We checked the local logs in %temp%\McAfeeLogs and found these lines in the McAfee_MfeEpAac_date/time.log which is suggesting that missing root and/or intermediate certificates on the server may be the cause.

01-08 08:24:14 [03040] VTP LazyInit, LastErr 0x800b0109 A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
01-08 08:24:14 [03040] Found C:\Windows\syswow64\WINTRUST.dll
01-08 08:24:14 [03040] Found C:\Windows\syswow64\CRYPT32.dll
01-08 08:24:14 [03040] Found C:\Windows\syswow64\MSASN1.dll
01-08 08:24:14 [03040] Parent is not Installer, LastErr 0x800b0109 A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
01-08 08:24:14 [03040] VerifyParentEntryPointIsMcAfeeSigned: VerifyProcess PID[2720] LastErr 0x800b0109 A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
01-08 08:24:14 [03040] Parent is not McAfee, so install cannot contiune
01-08 08:24:14 [03040] Exit: LastErr 0x800b0109 A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

Has anyone else seen or experienced this kind of error? I'd be interested to hear from you!

Many thanks,

Nick