Local command line interface access password was not updated or does not exist on client system

Technical Articles ID: KB78110
Last Modified: 12/18/2019

Environment

McAfee Application and Change Control (MACC) 6.1.0

Problem

The passwd file for MACC is not present on the client system (in c:\Program Files\McAfee\Solidcore\) after doing the following on the ePolicy Orchestrator (ePO) server:

Upgrading the Solidcore Extension from 5.1.x to 6.1.0 on the ePO server
Changing the local command line interface (CLI) access password
Deploying Solidcore Agent through ePO

An event message (similar to the following) displays in the Windows Event Viewer Application Log when this issue occurs:

Event No: 975
Event source: McAfee Solidifier
Generated On: Tue Apr 16 14:55:46 2013
Event ID: 000008
Event Type: INFORMATION
Source Name: McAfee Solidifier
Computer Name:
User Name: N/A
Description: Local Administrator executed command 'sadmin -s solidcore' at Tue Apr 16 2013 14:55:46 (Return status: 22).

Problem

The following is recorded in the Solidcore log files:

U.1784.2024: Apr 10 2013:13:51:11.521: SYSTEM: cmdi_process.c: 800: Command 'sadmin passwd -s ' returned 22: Invalid argument

Problem

The local CLI is recoverable without a password.

System Change

The Solidcore Extension was upgraded from 5.1.x to 6.1.0.

Cause

In the General Configuration policy for the CLI password policy setting, two more properties were added after 5.1:

password_sha512
salt

When a policy from version 5.1 is used on the new version after the extension upgrade, the policy might cause problems on the endpoint because it lacks these properties.

Solution

This issue is resolved in MACC 6.1.1 and later. Technical Support recommends upgrading to one of these versions to resolve the issue.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Workaround

Use the following steps to work around this issue:

Log on to the ePO console.
Export the policy that existed in Extension version 5.1. See the "Upgrade the Solidcore extension" section of the MACC 6.1.4 Installation Guide for details about exporting policies.
Import the policy into ePO again.
Open the policy and add the value for password. Click Save.
Perform an agent wake-up call on the system group that the policy has been applied to.

Affected Products

Application and Change Control 6.1
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Local command line interface access password was not updated or does not exist on client system

Environment

Problem

Problem

Problem

System Change

Cause

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Local command line interface access password was not updated or does not exist on client system

Environment

Problem

Problem

Problem

System Change

Cause

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title