Hotfix version. Date. McAfee Agent 4.5. Installation instructions. Installing on epolicy Orchestrator 4.x systems. Tasks. Tasks

Transcription

1 Hotfix version Build Date August 16, 2012 McAfee Agent 4.5 This Hotfix addresses following issues: Issue: The following field values were not used during update tasks that were executed immediately after the agent service started, or before the first policy enforcement: o Product update log file o Enter an executable to run after an update completes o Run only after successful updates (Reference: ) Resolution These values are now used at service start. Issue The McAfee Agent's "General" policy values "Prompt user when a reboot is required" and "Force automatic reboot after (seconds)" were not used during deployment tasks executed immediately after the agent service started and before the first policy enforcement. (Reference: ) Resolution These values are now used at service start. Installation instructions This section provides instructions for installing and upgrading McAfee Agent 4.5 for use with McAfee epolicy Orchestrator software versions 4.5, and 4.6. Note: Embedded credential packages are not available for Hotfixes. Tasks Installing on epolicy Orchestrator 4.x systems Upgrading Installing, upgrading and uninstalling using Windows command-line switches Installing on epolicy Orchestrator 4.x systems This section provides instructions for installing McAfee Agent 4.5 for use with epolicy Orchestrator software 4.5 and 4.6 on Windows using two different methods. Tasks

2 Installing on Windows using epolicy Orchestrator 4.5 and 4.6 Installing on Windows using third-party deployment methods Installing on Windows using epolicy Orchestrator 4.5 and 4.6 software You must have administrator rights on the Windows system to perform this task. The agent extension must be installed on the epolicy Orchestrator server before the agent is installed on any clients. 1. Download the current agent extension, EPOAGENTMETA.zip, and the Hotfix Agent package MA450HF672138WIN.zip, to the system containing the epolicy Orchestrator server. 2. Install the agent extension: a. In the epolicy Orchestrator console, click Menu Software Extensions. b. Click Install Extension. c. Browse to the location containing EPOAGENTMETA.zip, select it and click OK. The Install Extensions summary page appears. d. Click OK to complete the installation of the extension. 3. Check in the agent package to the epolicy Orchestrator repository. Note: If installing on a computer running Common Management Agent 3.6, the package must be checked in to the Current repository branch. a. In the epolicy Orchestrator console, click Menu Software Master Repository. b. Click Actions Check In Package. c. Browse to the location containing MA450HF672138WIN.zip, select it and click Next. d. Ensure that Current is selected in the Branch field. e. Click Save. 4. Create a deployment task or push the agent to client systems. If using the push method, follow these steps: a. In the epolicy Orchestrator console, click System Tree. b. Select the target systems or groups. c. Click Actions Agent Deploy Agent. d. Select the version of the agent to be deployed. e. Type valid credentials in the Domain, User name, and Password fields. f. Click OK. Installing on Windows using third-party deployment methods The agent extension must be installed on the epolicy Orchestrator server before the agent is installed on any clients. Tip: This task requires the creation of an agent installation package, FramePkg.exe (see Step 4). Installation of the package requires administrator rights. 1. Download the current agent extension, EPOAGENTMETA.zip, and the Hotfix package, MA450HF672138WIN.zip, to the system containing the epolicy Orchestrator server. 2. Install the agent extension. See step 2 in the appropriate Installing Windows instructions (above), for your version of epolicy Orchestrator software. 3. Using the epolicy Orchestrator console, check in the agent package to the Current (default) repository branch. 4. Create an epolicy Orchestrator installation package.

3 o For epolicy Orchestrator 4.5 and 4.6 software: a. In the epolicy Orchestrator console, click System Tree. b. At the bottom of the System Tree, click System Tree Actions New Systems. c. Select Create and download agent installation package. d. Select the desired Agent Package e. Deselect Use Credentials. f. Click OK. The Download file dialog box opens. g. Select FramePkg.exe and save it to the desktop. 5. Note the location of the downloaded FramePkg.exe to identify it when using your third-party deployment system. You can add parameters and switches as allowed by your deployment system. For a list of available parameters, see Installing, upgrading and uninstalling using Windows command-line switches. Upgrading This section provides instructions for upgrading the agent from versions 3.6 and 4.0 to McAfee Agent 4.5. Upgrading on Windows using FramePkg_upd.exe You must have administrator rights to perform this task. 1. Download and extract the Hotfix agent package, MA450HF672138WIN.zip, to a temporary location. 2. Copy FramePkg_upd.exe to a location on the target client. 3. From the command line on the client, type <path>/framepkg_upd.exe /upgrade, where <path> is the location containing the copied file. Note: This command is the equivalent of double-clicking FramePkg_upd.exe in the folder containing the installation package. Installing, upgrading and uninstalling using Windows command-line switches This section describes using selected command-line and MSI parameters to specify installation and upgrading preferences. Use the list of tasks as a menu from which to select those that suit your circumstances and preferences. Tasks Installing the agent and data in their default locations using default and key information Installing the agent in specified folders Installing the agent with user-selected policies Installing the agent and specifying the log folder Installing the agent with user-selected site information and user-selected keys Installing the agent by force Installing without requiring specific user privileges Installing silently Installing with specification of interface and log file language Upgrading agent to a new version Uninstalling the agent

4 Installing the agent and data in their default locations using default sitelist and key information Use this command to install the agent, sitelist, and keys in their default locations. framepkg.exe Note: This command is the equivalent of double-clicking the program file in the installation package. Installing the agent in specified folders Use this command to install the agent in a folder other than the default. The example shown here specifies a folder for the installation files (instdir) and a folder for the data files (datadir). These can be the same or different folders. framepkg.exe /install=agent /instdir=<target folder name> /datadir=<target folder name> Installing the agent with user-selected policies Use this command for installation and upgrade to include policies selected by the administrator rather than the default policies. framepkg.exe /install=agent /agentpolicy=<full path of user-defined policy file> Installing the agent and specifying the log folder Use this command to install the agent in its default location and specify a log file other than the default log file as the record of the agent s activities. framepkg.exe /install=agent /logdir=<target folder name> Note: The /logdir parameter can be appended to other installation commands. Installing the agent with user-selected site information and user-selected keys Use this command to install the agent and specify a sitelist file and security keys (srpubkey.bin and reqseckey.bin) other than the defaults. This command is useful when upgrading an agent using FramePkg_upd.exe. It specifies the server with which the agent communicates, regardless of the site information embedded in the original installation package. framepkg.exe /install=agent /siteinfo=<full path of sitelist.xml> The security keys must be located in the same folder as the sitelist. Use epolicy Orchestrator software to export the files: 1. Export the Sitelist file: a. Select Software Master Repository. b. Click Export Sitelist. c. Save the file to a new location. 2. Export the security keys: a. Select Configuration Server Settings Security Keys, and click Edit. b. Select Master Agent-server secure communication key, and click Export. c. Save the files to the same location as the Sitelist file. Installing the agent by force Use this command to delete the currently installed agent and force install a different agent only when: Downgrading to an earlier version of the agent. Changing the names of the folders that contain the agent. Restoring agent settings to a default state. framepkg.exe /install=agent /forceinstall

5 Note: McAfee strongly advises that you only use /forceinstall to install the McAfee Agent under the conditions stated above, because the command: Deletes current program files and restores data files to a default state. As a result, all user-configured repositories and user-created tasks are lost. Removes the currently installed agent and introduces the risk that installation of the replacement agent could fail. As a result, one or more systems could have no agent at all. Sometimes requires a restart of the system. Installing without requiring specific user privileges Use this command to allow all users access to agent files and registry, regardless of their user privileges. framepkg.exe /install=agent /defaultpermissions Installing silently Use this command to install the agent without displaying information dialog boxes on the client. framepkg.exe /install=agent /s or framepkg.exe /install=agent /silent Installing with specification of interface and log file language Use this command to install the agent and specify a language other than the target computer s native language. framepkg.exe /install=agent /uselanguage=<language code> Language codes are: Language Code Chinese (Simplified) 0804 Chinese (Traditional) 0404 Dutch 0413 English 0409 French 040C German 0407 Italian 0410 Japanese 0411 Korean 0412 Polish 0415 Portuguese 0416 Spanish Swedish 040A 041D Russian 0419 Note: To restore the computer s native language, type /resetlanguage Upgrading the agent to a new version Use either of these commands to upgrade the agent to a new version. framepkg_upd.exe or framepkg.exe /upgrade

6 Using these commands is the equivalent of double-clicking FramePkg_upd.exe in the installation package. Uninstalling the agent Some managed products, such as McAfee VirusScan Enterprise software and McAfee Host Intrusion Prevention, incorporate their own copies of the agent. Disconnect the agent from its epolicy Orchestrator server, and if there are no point-products using it for updating, remove it completely: frminst.exe /remove=agent Remove the agent completely, but only if it is not connected to an epolicy Orchestrator server and no pointproducts are using it for updating: frminst.exe /uninstall Remove the agent completely, even if it is connected to an epolicy Orchestrator server or point-products are using it for updating: frminst.exe /forceuninstall Important information The attached files are provided as is, and with no warranty either expressed or implied as to their suitability for any particular use or purpose. McAfee, Inc. assumes no liability for damages incurred either directly or indirectly as a result of the use of these files, including but not limited to the loss or damage of data or systems, loss of business or revenue, or incidental damages arising from their use. Hotfix files should be applied only on the advice of McAfee Technical Support, and only when you are actually experiencing the issue being addressed by the Hotfix. Hotfix files should not be proactively applied in order to prevent potential product issues. You are responsible for reading and following all instructions for preparation, configuration, and installation of Hotfix files. Hotfix files are not a substitute or replacement for product Service Packs which may be released by McAfee, Inc. It is a violation of your software license agreement to distribute or share these files with any other person or entity without written permission from McAfee, Inc. Further, posting of McAfee Hotfix files to publicly available Internet sites is prohibited. McAfee, Inc. reserves the right to refuse distribution of Hotfix files to any company or person guilty of unlawful distribution of McAfee software products. Questions or issues with McAfee Hotfix files should be directed to McAfee Technical Support. Copyright 2011 McAfee, Inc. All Rights Reserved.