Loading...

Knowledge Center


ePolicy Orchestrator 5.10.x Known Issues
Technical Articles ID:   KB90382
Last Modified:  8/2/2019
Rated:


Environment

McAfee ePolicy Orchestrator (ePO) 5.10.x
McAfee ePO (on-premises)
McAfee ePO on AWS

Amazon Web Services (AWS)

Summary

Recent updates to this article
Date Update
August 2, 2019 Added new reference to the non-critical section: TSET-4073.
Added resolved issue documented in KB91719 and KB91726.
July 23, 2019 Created new section to cover ePO Support Center issues.
Added new reference 1267730.
July 2, 2019 Added ePO 5.10.0 Update 4 cumulative update (General Availability). Added new references resolved by Update 4:1273203, 1271813, 1274194, and 1267793.
May 29, 2019 Added reference 1272778 to the non-critical section.
May 28, 2019 Updated issues resolved by ePO 5.10.0 Update 4 cumulative update (released to support). Added references 1273379 and 1258664 to the non-critical section.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.


Product release information
Product Version General Availability
(GA)
Release Notes
ePO 5.10.0 Update 4 (GA) July 2, 2019 PD28343
ePO 5.10.0 Update 4 (RTS) 2 May 14, 2019 n/a 3
ePO 5.10.0 Update 3 (GA) March 12, 2019 PD28210
ePO 5.10.0 Update 2 (GA) November 13, 2018 PD28102
ePO 5.10.0 Update 1 (RTS) 1 October 15, 2018 n/a 3
ePO 5.10 Hotfix 1253492 (RTS) 2 September 26, 2018 n/a 3
ePO 5.10 (Repost) August 28, 2018 PD27627
ePO 5.10 (GA) August 14, 2018
GA = General Availability
RTS= Released to Support
 
1 ePO 5.10 Update 1 was only Released to Support (RTS). Cumulative ePO 5.10 Update 2, which is a GA release, supersedes ePO 5.10 Update 1. ePO 5.10 Update 2 contains the fixes that were included in the ePO 5.10 Update 1, plus other fixes.
2
McAfee investigated this issue and a solution is currently available. This solution is currently not generally available, but is in Released to Support (RTS) status. To obtain the RTS build, log on to the ServicePortal and create a Service Request (https://support.mcafee.com/ServicePortal/faces/serviceRequests/createSR). Include this article number in the Problem Description field.

See KB51560 for detailed information on release cycles.
3 Release notes for released to support versions are not posted externally. The release notes are only included in the package that Technical Support sends to the customer.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, visit the Product Downloads site at http://www.mcafee.com/us/downloads/downloads.aspx.


Contents
Click to expand the section you want to view:

Reference
Number
Related
Article
Found Fixed Issue Description
1271813 KB91486
SB10285
5.10.0 5.10.0
Update 4
Issue: Security advisory issued by Oracle for Java vulnerability CVE-2019-2602. For details, click here

Resolution: ePO 5.10 Update 4 uses ePO JRE 1.8.0 212.
1267793 SB10286 5.10.0 5.10.0
Update 4
Issue: Insufficient Transport Layer Protection (CVE-2019-3619).
Traffic between the Agent Handler and the SQL Server is not encrypted when 'db.properties' is configured to 'Require TLS' and SSL is not set to 'Force Encryption.'
1274194 - 5.10.0 5.10.0
Update 4
Issue: A low CVSS scored persistent XSS issue in ePO.
1254904 KB90944 5.10.0 5.10.0
Update 2
Issue: ePO 5.10.0 Server service (Apache) system crash on faulting module dal.dll. Agent-server communication is impeded because the service is unavailable.
1253492 KB90876 5.10.0 5.10.0
Update 2
Issue: After you upgrade to ePO 5.10, systems display with blank names in the System Tree.

Resolution: Change the compatibility level of the ePO database to 110 or above. See the related article for details.
1253997 KB90920 5.10.0 5.10.0
Update 2
Issue: Certain server tasks might be stuck 'in progress' until the ePO Application Server service is restarted. Also, the ePODataChannelDataMT table in the ePO database might grow excessively large.
1254493 KB90954 5.10.0 5.10.0
Update 2
Issue: The Database Index Maintenance task can get stuck 'in progress' which leads to general console slowness.

Workaround: See the related article for more information.
1251847 KB90841 5.10.0
(GA)
5.10.0
Repost
Issue: Intermittent application crash on Apache service (apache.exe) in ePolicy Orchestrator 5.10 (build 5.10.2408) General Availability, released on August 14.
1233607 KB90222 5.10.0 n/a Issue: ePO is unable to make outbound connections to SQL, LDAP, or other servers where TLS 1.0 is disabled.

Resolution: See the related article for more information.
n/a = not applicable

Reference Number Related Article Found Fixed Issue Description
1273203 - 5.10.0
Update 4
(RTS)
5.10.0
Update 4
Issue: Uninstalling McAfee ePO 5.10 Update 4 (RTS version), produces an error when viewing the System Properties.
1268705 - 5.10.0
Update 3
5.10.0
Update 4
Issue: [Reporting] A query does not return the correct System count containing Endpoint Security (ENS) when the Product Version search criteria contains less than ENS 10.
1266562 - 5.10.0 5.10.0
Update 4
Issue: [Reporting] A user cannot select multiple systems with Shift+left-click from the Queries and Reports result page.
1268448 - 5.10.0 5.10.0
Update 4
Issue: [Reporting] Automatic Response does not trigger correctly when multiple subgroups are added using the OR operator with the 'Defined At' filter.
1269374 - 5.10.0
Update 3
5.10.0
Update 4
Issue: [Reporting] Notification icons do not remain in the top right after you apply Update 3 using the Microsoft Internet Explorer 11 browser.
1268032 - 5.10.0 5.10.0
Update 4
Issue: You cannot upgrade Extension Bundles using a manual check-in with ePO 5.10 when the ePO language is set to French, Spanish, or Japanese.
1267869 KB91376 5.10.0 5.10.0
Update 4
Issue: The ePO 5.10.0 rule 'Always allow logon' found on the Logon Protection page, does not override blocks.
1269821 - 5.10.0 5.10.0
Update 4
Issue: Unable to import a custom ePO Server task. The following error displays during the import:
An unexpected error occurred
1269492 - 5.10.0 5.10.0
Update 4
Issue: [Reporting] Unable to check Security resources under Reporting. When you try to check the security resources while Proxy is enabled, a "failed to load" error appears.
1269259 - 5.10.0 5.10.0
Update 4
Issue: Unable to check in the Protection Workspace extension from the Software Catalog. Some license keys work, but some do not.
1269458 - 5.10.0 5.10.0
Update 4
Issue: Installation of Update 3 fails. Key errors recorded in the Orion.log:
  • error: Unknown error while executing other file.
  • error: Error: EPERM: operation not permitted, unlink 'C:\PROGRA~2\McAfee\EPOLIC~1\dal.dll'
Resolution: Update 4 installs successfully over previous updates without an error.
1269756 - 5.10.0
Update 3
5.10.0
Update 4
Issue: Update 3 fails to install if the McAfee Mobile Plugin service is running. When it fails to roll back, it leaves ePO in a broken state and the administrator cannot log on.

Resolution: Update 4 stops the Service for the McAfee Plugin service during installation.
1270985 - 5.10.0 5.10.0
Update 4
Issue: Installation of Update 3 fails due to an Invalid IP address in the EPOComputerPropsStaging.
1269434 KB91474 5.10.0 5.10.0
Update 4
Issue: The ePO Event Parser service becomes unresponsive intermittently, with varying frequency. Events stop being processed from the ePO Server Events folder.
1256022 - 5.10.0 5.10.0
Update 4
Issue: Automatic response notifications fail after you delete a user on a system tree with an associated object.
1267465 - 5.10.0 5.10.0
Update 4
Issue: A user with the correct permission set is unable to drag and drop Tags in the Tag Catalog. But, that user can successfully use the Actions, Move feature. The following error displays when the drag-and-drop action fails:
You are not authorized for this operation.
1270459 - 5.10.0 5.10.0
Update 4
Issue: The last chosen packages are not saved while you edit the Distributed Repository.
1269740 KB91405 5.10.0
Update 3
5.10.0
Update 4
Issue: System details in the System Tree are empty after you install ePO 5.10.0 Update 3.
1263829
1247027
KB91371 5.10.0 5.10.0
Update 3
Issue: Using a permission set-based user to modify multi-slot policy assignment results in an unexpected error.

Workaround: Modify the multi-slot policy assignment using an account with global administrator rights. 
1262938
1263169
KB91178 5.10.0 5.10.0
Update 3
Issue: Remote Agent Handlers intermittently switch status between Active and Inactive.

Workaround: See the related article for details.
1261838
1263212
KB91170 5.10.0 5.10.0
Update 3
Issue: Endpoint Security Advanced Threat Protection column incorrectly displays as Threat Intelligence Exchange or Threat Intelligence.

Workaround: See the related article for details.
1254615
1254467
KB91066 5.10.0 5.10.0
Update 3
Issue:  ePolicy Orchestrator 5.10.0 Server Task Log column sizes intermittently resize or rearrange unexpectedly.

Workaround: See the related article for details.
1256825 KB91122 5.10.0 5.10.0
Update 3
Issue: The Security Resources page in ePolicy Orchestrator 5.10 is unable to load feeds when using a Proxy.

Workaround: See the related article for details.
1259177
1262004
KB91126 5.10.0 5.10.0
Update 3
Issue:  An export of DLP query results in ePO 5.10 to CSV or PDF format fails to produce the expected results.

Workaround: See the related article for details.
1257909
 1260494 
KB91132 5.10.0 5.10.0
Update 3
Issue: Several configured Policy Assignment Rules fail to display properly in ePolicy Orchestrator.
1260252 KB91153 5.10.0 5.10.0
Update 3
Issue: The ePolicy Orchestrator 5.10 Tag Catalog fails to display properly when viewed in Internet Explorer 11.

Workaround: See the related article for details.
1265332 KB91232 5.10.0 5.10.0
Update 3
Issue: The 'Apply tag now' feature in ePO 5.10 ignores product properties specified in tag criteria. The tag is applied more broadly than expected.
1264626 KB91237 5.10.0 5.10.0
Update 3
Issue: When multiple Active Directory servers for the same domain are registered, it is impossible to interact with the options on the Server Settings, Active Directory groups page.
1256510 KB91498 5.10.0 5.10.0
Update 2
Issue: Roll up queries fail to execute after you upgrade to ePO 5.10. The following error displays in the console when running the query:
An unexpected error occurred
1256243 KB91014 5.10.0 5.10.0
Update 2
Issue: Agents communicate successfully to ePO 5.10, but the last communication time is not incremented in the ePO console.
1251938 - 5.10.0 5.10.0
Update 2
Issue: Columns in the ePO System Tree are sorted in the opposite order that the arrow on the column header indicates.
1252008 - 5.10.0 5.10.0
Update 2
Issue: A user's email address might be included multiple times when a selection is made from Contacts and Users for exporting systems to CSV, XML, HTML, or PDF, using email.
1252960 - 5.10.0 5.10.0
Update 2
Issue: In certain scenarios, an Audit Log entry is not created when an ePO user account is enabled or disabled.
1251942 - 5.10.0 5.10.0
Update 2
Issue: Character corruption is seen on the Cancel Changes option in the Client Task details pane, when you view changes made as a user with no management permission. This issue is observed when a user has logged on as a non-English user.
1254550 - 5.10.0 5.10.0
Update 2
Issue: String corruption occurs during ePO Database Index Maintenance server task creation. This issue is observed on systems in Japanese, Korean, Turkish, Russian, Chinese Traditional, and Chinese Simplified.
1247489 - 5.10.0 5.10.0
Repost
Issue: The Reported Date and Status columns in Product Properties on the System Tree page do not display the correct time and status.
1251695 KB90868 5.10.0 5.10.0
Repost
Issue: Software Catalog fails to properly display multi-byte character information when the end-user license agreement (EULA) area is accessed.

Resolution: This issue is resolved with the ePO 5.10.0 Repost (build 5.10.2428.1). See the related article for details.
TSET-4073 KB91734 ePO 5.10
Update 4
n/a Issue: Unable to log on to the ePO console after applying ePO 5.10 Update 4.  This issue is seen on systems that use Windows Authentication.

Resolution: See the related article for details.
n/a KB91726 5.10.0 n/a Issue: The stderr.log is rapidly growing in size. 
Stderr.log records many alerts that reference: 
    'org.bouncycastle.tls.TlsFatalAlert'

Resolution: See the related article for details.
n/a KB91719 5.10.0 n/a Issue: Upgrade failed from 5.3.3 to 5.10. The ca.keystore file is corrupted.
Resolution: See the related article for details.
1272778 KB91568 5.10.0 - Issue: Unable to interact with runtime parameters when you configure a server task to run multiple similar reports.
1258664 KB91204 5.10.0 - Issue: Server task actions affect unexpected systems when run against ePO queries using sorting.
1273379 KB91564 5.10.0 - Issue: Altering policy assignments in ePO 5.10 via the 'Edit Policies on a Single System' returns users unexpectedly to the primary System Tree page.
1270289 KB91420 5.10.0
Update 3
- Issue: Queries fail after you upgrade to ePO 5.10 cumulative Update 3 and show the error:
An unexpected error occurred
Some dashboard monitors can fail and show the error:
This monitor can't be displayed due to an unrecoverable error
Workaround: See the related article for details.
- KB91402 5.10.0
Update 3
n/a
Issue:  After you try to install ePO 5.10.0 Update 3, the install fails and displays a message: 
Failed to apply update. All applied changes have been reverted.

After the failed update, you are unable to log on to ePO. The following error displays at the console even though the credentials are correct.
You have provided invalid credentials

Resolution: See the related article for details.
1258261 KB91001 5.10.0 - Issue: Newly added systems are placed incorrectly in the root of the Lost & Found folder in ePO 5.10.
1231277 - 5.10.0 - Issue: [User Interface] After you click the Back option in the Server Task Log Details page, it fails to navigate to the previous page. The interface does not operate properly when it navigates from the Guided Configuration dashboard.
1202194 - 5.10.0 - Issue: [User Interface] Under Queries and Reports, after you select any canned query and perform a drag and drop, it is not possible to select the checkbox for that query.

Workaround: To select the checkbox, either log off and log on again, or click the browser refresh option.
1172039 - 5.10.0 - Issue: [User Interface] Server task cannot be edited after you delete the associated query used by the task.
1148578 - 5.10.0 - Issue: [User Interface] The Exclusion and Inclusion list box is invisible when a user edits the group details in the System Tree page.
1231996 - 5.10.0 - Issue: [Client Tasks] A user does not receive a notification when the administrator changes the client task submitted by the user for approval.
1232382 - 5.10.0 - Issue: [Product Deployment] Deployment status continues to show "In Progress" even though deployment is 100% complete.
1236694 - 5.10.0 - Issue: [Cluster] Certificate import failure into CertStore of secondary node causes a communication failure.
1227825 - 5.10.0 - Issue: [Dashboards and Queries] Dashboard Monitor widgets in ePO Summary Dashboard can overlap for a restricted user.
1242246 - 5.10.0 - Issue: [Policy Management] When you import multi-slot policy assignments, the following error occurs:
Unexpected error
1229746 - 5.10.0 - Issue: A newly created user with limited permissions set sees the following error message when logging in:
You are not authorized for this operation
1235184 - 5.10.0 - Issue: [Logging] Rollup task logs are mixed with the earlier task log.
1235932 - 5.10.0 - Issue: [Repository Management] ePO packages that contain a file name with spaces do not replicate to a distributed repository, though it can be checked in.
1243046 - 5.10.0 - Issue: When you click Edit on the Policy Catalog page, it shows the action menu list.
1063461 KB85013 5.1.1 - Issue: A client task might continue to report "In Progress" even after the task has completed.

Resolution: See the related article.
1082176
1081917
KB90800 5.1.1 - Issue: When you check in bundles with extension dependencies, the dependent extensions can be indefinitely listed as updating. The extension installation is successful. But, because the extension is labeled as updating, you receive an error when you try to uninstall the extension using the Software Manager.

Workaround: To reset the updating status, see the related article.
817898 - 5.1.0 - Issue: User-based Policy Assignment Rules are not enforced for users in child domains.
1034328
1030333
KB84628 5.9.0 n/a Issue: If you use an encrypted SQL connection for ePO and you apply a hotfix or update that increments Java, the new Java installation does not have the correct certificates in the Java trusted certificates store.

Resolution: To import the certificates in the new Java trusted certificate store, implement Solution 4 in the related article.
1103325 - 5.9.0 n/a Issue: The wrong catalog version is downloaded from ePO as part of manifest.xml.

Resolution: Use a lazy-cached super-agent-repository to avoid this issue.
1069278 - 5.9.0 n/a Issue: The agent installation URL generated by the remote command: ComputerMgmt.createAgentDeploymentUrlCmd
fails to allow file download.

Resolution: Use the graphical user interface to generate the agent installation URL.
1163947 KB88000 5.9.0 n/a Issue: You see the following error during ePO installation:
Setup was unable to access the SQL UDP port 1434 on the specified SQL Server
Resolution: Make sure that the remote connection to the SQL service works. Also, make sure that the SQL Server process is up and running on the specified port. See the related article for details.
968675 - 5.1.1 n/a Issue: The client task object structure changed in ePO 5.1.1. As a result, the EPOTaskObject table in the ePO database now has a different set of columns from all previous versions. This change was made to support newly added parameters for the new architecture. So, client task sharing is not supported from ePO 5.1.1 or later to any earlier version of ePO, for example: 5.1.x and 5.0.x. Client task sharing still works between ePO 5.1.1 and later servers.

Resolution: Disable client task sharing until all ePO servers are migrated to ePO 5.1.1 or later. Then re-enable sharing.
1173148 KB90379 5.1.0 n/a Issue: Unable to group by event product code.

Resolution: After you upgrade to a new version of ePO, some of the columns can be renamed or removed. In these scenarios, the upgrade flow edits existing query definitions in the database. The queries that are already exported to a file have older definitions, and do not work in newer versions of ePO. You must create a query in such scenarios.
917943 KB77920 5.1.0 n/a Issue: Page buttons display in the ePO 5.x System Tree after you upgrade from ePO 4.6.4 or later.

Resolution: Clear the browser cache. See the related article for details.
913365 - 5.1.0 n/a Issue: It is not explicitly stated in the Custom URL Viewer monitor dialog that only input that contains the full URL is acceptable.

Resolution: Type the full URL into the Custom URL Viewer monitor dialog.
848248 - 5.1.0 n/a Issue: VirusScan Enterprise Access Protection blocks the functionality of the Upgrade Compatibility Utility.

Resolution: If you have VirusScan Enterprise on your source or target systems, disable the Access Protection feature during the installation.
823342 - 5.1.0 n/a Issue: The Software Manager features Check in all and Automatic Product Download do not support product extension packages that contain multiple ZIP components. For example, Host Intrusion Prevention and MRA. This fact might give the impression that all extensions are up to date when they are not.

Resolution: Download the extensions for Host Intrusion Prevention and MRA and check them in manually.
816475 - 5.1.0 n/a Issue: The McAfee ePO server Snapshot status does not change to the orange Snapshot is Out of Date status when you remove an Agent Handler from a remote system.

Resolution: The issue resolves itself within five minutes.
813461 - 5.1.0 n/a Issue: When you cancel the migration utility before a migration is complete, the Program Files (x86)\ePolicy Orchestrator folder and some registry keys are left behind on the target system.

Resolution: Delete the ePO installation folder and the registry keys from the target system.
780095 - 5.1.0 n/a Issue: When you use a web browser to access the Web API directly, the browser caches credentials, which potentially leads to a privilege escalation. If a privilege escalation occurred, users might be granted access to data or commands for which they are not authorized.

Resolution: The purpose of the Web API is for programmatic automation of tasks. If you choose to use a web browser to access the Web API directly, for example: https://servername:port/remote/core.help, close your browser window after you have finished to clear your cached credentials.
763783 - 5.1.0 n/a Issue: When you check in a different major product version where an existing product and hotfix are checked in to ePO 5.3, the hotfix is deleted.

Resolution: Move the hotfix to a different branch before you check in a new package. Or, you can check the hotfix back into the repository after you check in the major version.
n/a = not applicable

Back to top
Reference Number Related
Article
Found
Version
Fixed
Version
Issue Description
1236435 - 5.10.0 - Issue: The Agent Handler (AH) and Data Exchange Layer (DXL) instances that are manually closed from the AWS console do not get removed from the ePO console.

Resolution: You must manually remove the AH and DXL entries from ePO console. AH and DXL entries are removed from ePO console only if instances are closed using AWS Auto Scaling Group.
1237618 - 5.10.0 n/a
Issue: After you create the first AutoUpdate ePO stack, two emails are unexpectedly sent to the person mentioned as the operator of the stack.
Explanation: A limitation with how AWS handles paused and resumed pipelines causes this issue. Subsequent auto-updates send only one email.
1238250 - 5.10.0 n/a Issue: Delete operation of a stack fails when the AutoUpdate of AH and DXL is in progress.

Resolution: Do not try to delete a stack while the AutoUpdate of Agent Handler or DXL is in progress. Delete the stack only after the AutoUpdate is complete.
n/a = not applicable
Reference Number Related
Article
Found
Version
Fixed
Version
Issue Description
1267730
ePO-6267
KB91678 5.10.0.286 5.10.0.398 Issue: Server Health check fails on the ePO Server. Orion.log records the following error:

BaseCheckList  - ePO_SERVER_CPU_MEM_CHECK failed. Skipping other checks in the checklist EpoServerHealthCheckList

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.