| Product Version | General Availability (GA) |
| MNE 4.1.5 | October 9, 2018 |
| MNE 4.1.4 | April 10, 2018 |
| MNE 4.1.3 | December 14, 2017 |
| MNE 4.1.2 | November 13, 2017 |
| MNE 4.1.1 | March 29, 2017 |
| MNE 4.1.0 | March 29, 2016 |
| MNE 4.0.0 | December 15, 2015 |
Management of Native Encryption 4.x Known Issues
Technical Articles ID:
KB86057
Last Modified: 9/18/2020
Last Modified: 9/18/2020
Environment
McAfee Management of Native Encryption (MNE) 4.x
Summary
Recent updates to this article:
Click to expand the section you want to view:
Back to Top
| Date | Update |
| September 18, 2020 | Updated KB article links. |
| August 20, 2020 | Minor formatting corrections. |
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, visit the Product Downloads site at https://www.mcafee.com/enterprise/en-us/downloads/my-products.html.
Click to expand the section you want to view:
| Reference Number |
Related Article | Found in Version |
Fixed in Version |
Issue Description |
| 1223797 | KB90165 | 4.1.2 | 4.1.3 | Issue: |
| 1196180 | - | 4.1.0 | 4.1.2 | Issue: Deadlock errors and agent communication errors are recorded in the ePO server log. For example: Transaction (Process ID 435) was
Resolution: Add an Index to the |
| 1155490 1187245 |
- | 4.0.0 | 4.1.1 | Issue: |
| 1107166 | KB86214 | 4.0.0 | 4.1.0 | Issue: |
| 1230491 | KB90380 | 4.1.3 | - | Issue: Reason: Apple has introduced a secure token on macOS High Sierra systems with APFS that uses Resolution: See the related article for how to add an Active Directory user to |
| General | ||||
| Reference Number |
Related Article | Found in Version |
Fixed in Version |
Issue Description |
| 1122494 | - | 4.1 | - | Issue: If an MNE extension upgrade fails, the latest queries and reports are not downgraded and removed from the default MNE dashboard. |
| 1099086 | - | 4.0 | - | Issue: [ePO] The |
| 1102848 | KB85963 | 4.0 | - | Issue: Switching from |
| 1054974 | - | 3.0 | - | Issue: When two users from two separate domains have the same name, and have logged on to the same system, the system properties show only one of those users. Specifically, it shows the last domain that the user logged on to. |
| 1110423 | KB86213 | 4.0 | Expected behavior | Issue: Servers that use
|
| 1048977 | - | - | Expected behavior | Issue: Compliance Report gives conflicting information regarding encryption state when a volume is transitioning between an encrypted and decrypted state, or conversely, after a policy enforcement. |
| 1049955 | - | - | Expected behavior | Issue: When you upgrade MNE from an earlier version to MNE 4.x, recovery keys are not expired. This issue is seen when the keys are exposed through recovery pages or DPSSP, before the client upgrade process has completed. |
| Windows BitLocker | ||||
| Reference Number |
Related Article |
Found in Version |
Fixed in Version |
Issue Description |
| 1245702 | - | - | 4.1.5 | Issue: With previous versions of MNE, users were prevented from using Resolution: This restriction is now removed and the user can go into the |
| 1174276 | - | 4.1.4 | 4.1.5 | Issue: When you activate |
| 1219878 | - | 4.1 | 4.1.3 | Issue: MNE fails to activate on systems running Microsoft Windows Server Core. |
| 1211338 1211351 1211327 |
KB89347 | 4.0 | 4.1.2 | Issue: The secondary data drive (D:) fails to unlock on startup after the unexpected shutdown of Windows. The |
| KB88993 | 4.0 | 4.1.1 | Issue: Multiple |
|
| 1157920 | - | 4.1 | 4.1.1 | Issue: When you change the |
| 1122952 | - | 4.1 | - | Issue: The postponement timer does not persist across system reboots. |
| 1127648 | - | 4.1 | - | Issue: If the change credential Control Panel applet is not closed after use, it will prevent subsequent activation attempts from completing successfully. |
| 1076882 | - | 4.0 | 4.1.0 | Issue: The Control Panel support link incorrectly redirects to the English page for all languages. |
| 1055149 | - | 4.0 | - | Issue: Hardware test failure after reboot, does not send an audit to the ePO server. |
| 1109898 | - | Issue: Overloading Network Unlock might cause network unlock key requests to perpetually time out. NOTE: With this release, the Network Unlock feature is intended only for use with servers. |
||
| 1049957 | - | 3.0 | - | Issue: Hardware test failure after a system restart fails to send an audit. |
| 964274 | - | - | Expected behavior | Issue: Resolution: This behavior is expected. There is a requirement that MNE reports information about all historical volumes on the system, including volumes that have been removed. Part of the information gathering process tries to query the keys. The keys are not stored for security reasons, for the volume that has been removed. Thus, the keys are not available. The entry in the log is there to show that gathering volume information was undertaken. It is just an attempt to get the keys for the volume, but none were available. This entry is only a |
| Mac OS X, macOS [FileVault] | ||||
| Reference Number |
Related Article |
Found in Version |
Fixed in Version |
Issue Description |
| 1209378 | - | 4.1.0 | 4.1.4 | Issue: Management of Native Encryption 4.x Extension installs a default Workaround: See the related article for details. |
| 1241211 | - | 4.1.3 | 4.1.5 | Issue: Disabling Resolution: MNE is now more verbose in providing information about deactivation failures in the product logs. |
| 1235513 | - | 4.1.3 | 4.1.5 | Issue: The ePO client task to uninstall the MNE client from a macOS system fails. This issue happens when an older version of MNE is installed on the client than the version checked in to the Software Catalog in ePO. |
| 1212546 | - | 4.1.2 | 4.1.4 | Issue: [ePO] Warning message for the unsupported time-based key rotation feature on APFS systems is not localized on the ePO MNE policy page. These warning messages are not localized:
|
| 1211509 1228987 |
KB89797 | 4.1.2 | 4.1.4 | Issue: MNE time-based key rotation fails on macOS High Sierra (10.13.0) Apple File System. The key rotation fails to be reflected on the selected clients after you take both the following actions:
|
| 1222209 | KB90120 | 4.1.3 | 4.1.4 | Issue: MNE fails to deactivate FileVault on macOS High Sierra 10.13.2. Native Encryption log on the client records the following errors:
Deactivation failed on APFS using volume UUID. To turn off FileVault, go to System Preferences, Security & Privacy item. Workaround: See the Related Article for details. |
| 1221830 | KB90116 | 4.1.2 | 4.1.3 | Issue: Unable to import recovery key from client, or deactivate MNE on systems with an APFS file system. Seen when a USB drive is inserted during a system startup. The following errors are seen on the client:
|
| 1203342 1204303 |
- | 4.1.0 | 4.1.3 | Issue: FileVault keys are not found in ePO even though the client status indicates that key has been escrowed. |
| - | - | MNE 4.1.1 MA 4.8.0 |
MNE 4.1.1 MA 5.0.4 |
Issue: The MNE 4.1.1 standalone installer for Mac, includes McAfee Agent (MA) version 4.8.0.1938 as part of the installer. MA 4.8.0.1938 is not officially supported on Mac OS X Sierra. NOTE: MA 4.8.0.1938 also does not support ePO 5.9. To view the MA supported environments article, see KB51573. Workaround: To use the standalone installer with Mac OS X Sierra or ePO 5.9, first install a supported version of MA (5.0.4 or later). Then run the standalone installer and enter the ePO credentials in the provisioning tool dialog. |
| - | - | 4.1.5 | - | Issue: [FileVault] MNE standalone installer comes packaged with the highest currently supported version of McAfee Agent (MA). If that MA version or later is already installed on the system before installation, the installer fails with a generic warning message. Workaround: Use the packaged version of MNE 4.1.5. This version can be deployed from ePO or the regular non-standalone installer of MNE, which does not contain MA. |
| 1253616 | - | 4.1.5 | - | Issue: Key rotation fails on macOS 10.14 (Mojave). |
| 1212078 | KB89819 | 4.1.2 | - | Issue: FileVault recovery is not possible when automatic password expiration is enabled on macOS High Sierra or later systems. Workaround Make sure that the password expiration policy is not set in ePO for all systems running macOS 10.13 or later. See the Related Article for more details. |
| 1109657 | - | 4.0 | - | Issue: The first two characters are not displayed at the left side for the Custom message of |
| 1110836 | - | 4.0 | - | Issue: MNE 4.0 product details are not displayed at the menulet. Seen post installation of MNE, after either Endpoint Security for Mac (ESM) or Endpoint Protection for Mac (EPM). |
| 1055134 | - | 4.0 | - | Issue: After disabling |
| - | - | MNE 4.1.5 |
Expected behavior | Issue: As of macOS Mojave 10.14 or later, the user can select between light and dark mode themes. Dark mode theme is not supported with Management of Native Encryption. If dark node is selected when MNE is installed, it does not update the look of any MNE components. In dark mode, some MNE user Interface components do not render appropriately, and might make reading text on the components harder. There are no known functional issues when operating MNE with macOS in dark Mode. |
| 1212353 | KB89825 | 4.1.2 | Expected behavior | Issue: MNE can't accept the FileVault password when trying to manage and take over FileVault. Seen when the Mac User Logon password is not the same as the FileVault password. Resolution: Sync the passwords before trying to manage FileVault. See the related article for details. |
| 1212900 | KB89834 | 4.0.0 | Expected behavior | Issue: MNE Mac Remote Provisioning tool requires a reboot before communication with ePO. Resolution: Restart the computer. |
| - | - | - | Expected behavior | Issue: MNE 4.0 co-exists only with EPM 2.3 or later. If an earlier version of EPM is installed, the MNE OS X client does not install on that system. |
| - | - | - | Expected behavior | Issue: MNE successfully disables FileVault only if both a Recovery Key is available in ePO, and the Policy mode is changed: From: To: |
| - | - | - | Expected behavior | Issue: If the FileVault status on a client system is |
| - | - | - | Expected behavior | Issue: The MNEUninstall task fails if the |
| 910502 | - | - | Expected behavior | Issue: Turning off FileVault from ePO disables all other policy settings. Affected policy settings include that the user sets on the client system:
|
| 910511 | - | - | Expected behavior | Issue: A user can't log on to the client system if:
|
| Reference Number |
Related Article |
Found in Version |
Fixed in Version |
Issue Description |
| 1199622 | - | DPSSP 1.3.0.12 | DPSSP 1.3.1.1 | Issue: The Workaround: Enable ' |
| 1199622 | - | 4.1.0 | 4.1.2 | Issue: Unable to access the DPSSP webpage when used with ePO 5.3.3. The authentication prompt is not displayed. |
| 1023804 | - | 2.1 | 4.0.0 | Issue: The Type parameter in custom query for |
| 977603 | - | 2.0 | 4.1.1 | Issue: The |
| 977621 | - | 2.0 | Expected behavior | Issue: There is no |
Back to Top
Related Information
To receive information about McAfee product updates, sign up for the Support Notification Service at https://sns.secure.mcafee.com/signup_login.
Affected Products
Languages:
This article is available in the following languages:
English United StatesSpanish Spain
French
Italian
Portuguese Brasileiro
