Local command line interface access password was not updated or does not exist on client system
Technical Articles ID:
KB78110
Last Modified: 12/18/2019
Environment
McAfee Application and Change Control (MACC) 6.1.0
Problem
1
The passwdfile for MACC is not present on the client system (in c:\Program Files\McAfee\Solidcore\) after doing the following on the ePolicy Orchestrator (ePO) server:
Upgrading the Solidcore Extension from 5.1.x to 6.1.0 on the ePO server
Changing the local command line interface (CLI) access password
Deploying Solidcore Agent through ePO
An event message (similar to the following) displays in the Windows Event Viewer Application Log when this issue occurs:
Event No: 975
Event source: McAfee Solidifier
Generated On: Tue Apr 16 14:55:46 2013
Event ID: 000008
Event Type: INFORMATION
Source Name: McAfee Solidifier
Computer Name:
User Name: N/A
Description: Local Administrator executed command 'sadmin -s solidcore' at Tue Apr 16 2013 14:55:46 (Return status: 22).
Problem
2
The following is recorded in the Solidcore log files:
The Solidcore Extension was upgraded from 5.1.x to 6.1.0.
Cause
In the General Configuration policy for the CLI password policy setting, two more properties were added after 5.1:
password_sha512
salt
When a policy from version 5.1 is used on the new version after the extension upgrade, the policy might cause problems on the endpoint because it lacks these properties.
Solution
This issue is resolved in MACC 6.1.1 and later. Technical Support recommends upgrading to one of these versions to resolve the issue.
Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.
Use the following steps to work around this issue:
Log on to the ePO console.
Export the policy that existed in Extension version 5.1. See the "Upgrade the Solidcore extension" section of the MACC 6.1.4 Installation Guide for details about exporting policies.
Import the policy into ePO again.
Open the policy and add the value for password. Click Save.
Perform an agent wake-up call on the system group that the policy has been applied to.
