Knowledge Center

ePolicy Orchestrator 5.10.x Known Issues
Technical Articles ID:   KB90382
Last Modified:  4/3/2019


McAfee ePolicy Orchestrator (ePO) 5.10.x
McAfee ePO (on-premises)
McAfee ePO on AWS

Amazon Web Services (AWS)


Recent updates to this article
Date Update
April 3, 2019 Added reference 1270289 to the non-critical section.
March 28, 2019 Added references for issues covered by 1269740 (KB91405) and KB91402.
March 21, 2019
Added reference 1247027 to the non-critical issues section.
March 12, 2019 Updated issues resolved by ePO 5.10.0 Update 3 cumulative update (General Availability release).
January 7, 2019 Added reference 1262938 to the non-critical section.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Product release information
Product Version General Availability
Release Notes
ePO 5.10.0 Update 3 (GA) March 12, 2019 PD28210
ePO 5.10.0 Update 2 (GA) November 13, 2018 PD28102
ePO 5.10.0 Update 1 (RTS) 1 October 15, 2018 n/a
ePO 5.10 Hotfix 1253492 (RTS) 1, 2 September 26, 2018 n/a
ePO 5.10 (Repost) August 28, 2018 PD27627
ePO 5.10 (GA) August 14, 2018
McAfee investigated this issue and a solution is currently available. This solution is currently not generally available, but is in Released to Support (RTS) status. To obtain the RTS build, log on to the ServicePortal and create a Service Request (https://support.mcafee.com/ServicePortal/faces/serviceRequests/createSR). Include this article number in the Problem Description field.

See KB51560 for detailed information on release cycles.
2 ePO 5.10 Update 1 was only released to support (RTS) and superseded by cumulative ePO 5.10 Update 2 which is a GA release. This release contains all same fixes as ePO 5.10 Update 1, plus additional fixes.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, visit the Product Downloads site at http://www.mcafee.com/us/downloads/downloads.aspx.

Click to expand the section you want to view:

Found Fixed Issue Description
1254904 KB90944 5.10.0 5.10.0
Update 2
Issue: ePO 5.10.0 Server service (Apache) system crash on faulting module dal.dll. Agent-server communication impeded because the service is unavailable.
1253492 KB90876 5.10.0 5.10.0
Update 2
Issue: After you upgrade to ePO 5.10, systems display with blank names in the System Tree.

Resolution 1: Change the compatibility level of the ePO database to 110 or above. See the related article for details.
1253997 KB90920 5.10.0 5.10.0
Update 2
Issue: Certain server tasks might be stuck 'in progress' until the ePO Application Server service is restarted. Also, the ePODataChannelDataMT table in the ePO database might grow excessively large.
1254493 KB90954 5.10.0 5.10.0
Update 2
Issue: The Database Index Maintenance task can get stuck 'in progress' which leads to general console slowness.

Workaround: See the related article for more information.
1251847 KB90841 5.10.0
Issue: Intermittent application crash on Apache service (apache.exe) in ePolicy Orchestrator 5.10 (build 5.10.2408) General Availability, released on August 14.
1233607 KB90222 5.10.0 n/a Issue: ePO is unable to make outbound connections to SQL, LDAP, or other servers where TLS 1.0 is disabled.

Resolution: See the related article for more information.
n/a = not applicable
GA = General Availability
Reference Number Related Article Found Fixed Issue Description
KB91371 5.10.0 5.10.0
Update 3
Issue: Using a permission set-based user to modify multi-slot policy assignment results in an unexpected error.

Workaround: Modify the multi-slot policy assignment using an account with global administrator rights. 
KB91178 5.10.0 5.10.0
Update 3
Issue: Remote Agent Handlers intermittently switch status between Active and Inactive.

Workaround: See the related article for details.
KB91170 5.10.0 5.10.0
Update 3
Issue: Endpoint Security Advanced Threat Protection column incorrectly displays as Threat Intelligence Exchange or Threat Intelligence.

Workaround: See the related article for details.
KB91066 5.10.0 5.10.0
Update 3
Issue:  ePolicy Orchestrator 5.10.0 Server Task Log column sizes intermittently resize or rearrange unexpectedly.

Workaround: See the related article for details.
1256825 KB91122 5.10.0 5.10.0
Update 3
Issue: The Security Resources page in ePolicy Orchestrator 5.10 is unable to load feeds when using a Proxy.

Workaround: See the related article for details.
KB91126 5.10.0 5.10.0
Update 3
Issue:  An export of DLP query results in ePO 5.10 to CSV or PDF format fails to produce expected results.

Workaround: See the related article for details.
KB91132 5.10.0 5.10.0
Update 3
Issue: Several configured Policy Assignment Rules fail to display properly in ePolicy Orchestrator.
1260252 KB91153 5.10.0 5.10.0
Update 3
Issue: The ePolicy Orchestrator 5.10 Tag Catalog fails to display properly when viewed within Internet Explorer 11.

Workaround: See the related article for details.
1265332 KB91232 5.10.0 5.10.0
Update 3
Issue: The 'Apply tag now' feature in ePO 5.10 ignores product properties specified in tag criteria. The tag is applied more broadly than expected.
1264626 KB91237 5.10.0 5.10.0
Update 3
Issue: When multiple Active Directory servers for the same domain are registered, it is impossible to interact with the options on the Server Settings, Active Directory groups page.
1256243 KB91014 5.10.0 5.10.0
Update 2
Issue: Agents communicate successfully to ePO 5.10, but the last communication time is not incremented in the ePO console.

Resolution: NOTE: Previously resolved by ePO 5.10.0 Update 1 (RTS). Superseded by cumulative ePO 5.10 Update 2.
1251938 - 5.10.0 5.10.0
Update 2
Issue: Columns in the ePO System Tree are sorted in the opposite order that the arrow on the column header indicates.
1252008 - 5.10.0 5.10.0
Update 2
Issue: A user's email address might be included multiple times when a selection is made from Contacts and Users for exporting systems to CSV, XML, HTML, or PDF, via email.
1252960 - 5.10.0 5.10.0
Update 2
Issue: In certain scenarios, an Audit Log entry is not created when an ePO user account is enabled or disabled
1251942 - 5.10.0 5.10.0
Update 2
Issue: Character corruption is seen on the Cancel Changes option in the Client Task details pane, when you view changes made as a user with no management permission. This issue is observed when a user has logged on as a non-English user.
1254550 - 5.10.0 5.10.0
Update 2
Issue: String corruption occurs during ePO Database Index Maintenance server task creation. The issue is observed on systems in Japanese, Korean, Turkish, Russian, Chinese Traditional, and Chinese Simplified.
1247489 - 5.10.0
Issue: The Reported Date and Status columns in Product Properties on the System Tree page, do not display the correct time and status.
1251695 KB90868 5.10.0
Issue: Software Catalog fails to properly display multi-byte character information, when the end-user license agreement (EULA) area is accessed.

Resolution: This issue is resolved with the ePO 5.10.0 Repost (build 5.10.2428.1). See the related article for details.1
1270289 KB91420 5.10.0
Update 3
- Issue: Queries fail after upgrading to ePO 5.10 cumulative Update 3 and show the error:
"An unexpected error occurred"
Some dashboard monitors can fail and show the error:
"This monitor can't be displayed due to an unrecoverable error"
Workaround: See the related article for details.
1269740 KB91405 5.10.0
Update 3
- Issue: System details in the System Tree are empty after installing ePO 5.10.0 Update 3.
- KB91402 5.10.0
Update 3
Issue:  After you try to install ePO 5.10.0 Update 3, the install fails and displays a message: 
"Failed to apply update. All applied changes have been reverted."

After the failed update, you are unable to log on to ePO. The following error is displayed at the console even though the credentials are correct.
"You have provided invalid credentials"

Resolution: See the Related Article for details.
1258261 KB91001 5.10.0 - Issue: Newly added systems are placed incorrectly in the root of the Lost & Found folder in ePO 5.10.
1231277 - 5.10.0 - Issue: [User Interface] After you click the Back option in the Server Task Log Details page, it fails to navigate to the previous page.
The interface does not operate properly when it navigates from the Guided Configuration dashboard.
1202194 - 5.10.0 - Issue: [User Interface] Under Queries and Reports, after you select any canned query and perform a drag and drop, it is not possible to select the checkbox for that query.

Workaround: To select the checkbox, either log off and log on again, or click the browser refresh option.
1172039 - 5.10.0 - Issue: [User Interface] Server task cannot be edited after you delete the associated query used by the task.
1148578 - 5.10.0 - Issue: [User Interface] The exclusion and Inclusion list box is invisible when a user edits the group details in the System Tree page.
1231996 - 5.10.0 - Issue: [Client Tasks] User does not receive a notification when the administrator changes the client task submitted by the user for approval.
1232382 - 5.10.0 - Issue: [Product Deployment] Deployment status continues to show "In Progress" even though deployment is 100% complete.
1236694 - 5.10.0 - Issue: [Cluster] Certificate import failure into CertStore of secondary node causes a communication failure.
1227825 - 5.10.0 - Issue: [Dashboards and Queries] Dashboard Monitor widgets in ePO Summary Dashboard can overlap for a restricted user.
1242246 - 5.10.0 - Issue: [Policy Management] When you import multi-slot policy assignments, "Unexpected error" occurs.
1229746 - 5.10.0 - Issue: A newly created user with limited permissions set can see the following error message when logging in:
"you are not authorized for this operation"
1235184 - 5.10.0 - Issue: [Logging] Rollup task logs can get mixed with the earlier task log.
1235932 - 5.10.0 - Issue: [Repository Management] ePO packages that contain a file name with spaces, do not replicate to a distributed repository, though it can be checked in.
1243046 - 5.10.0 - Issue: When you click Edit on the Policy Catalog page, it shows the action menu list.
1063461 KB85013 5.1.1 - Issue: A client task might continue to report 'In Progress' even after the task has completed.

Resolution: See the related article.
KB90800 5.1.1 - Issue: When you check in bundles with extension dependencies, the dependent extensions can be indefinitely listed as updating. The extension installation is successful. But, because the extension is labeled as updating, you receive an error when you try to uninstall the extension using the Software Manager.

Workaround: To reset the updating status, see the related article for details.
817898 - 5.1.0 - Issue: User-based Policy Assignment Rules are not enforced for users in child domains.
KB84628 5.9.0 n/a Issue: If you use an encrypted SQL connection for ePO and you apply a hotfix or update that increments Java, the new Java installation does not have the correct certificates in the Java trusted certificates store.

Resolution: To import the certificates in the new Java trusted certificate store, implement Solution 4 in the related article.
1103325 - 5.9.0 n/a Issue: The wrong catalog version is downloaded from ePO as part of manifest.xml.

Resolution: Use a lazy-cached super-agent-repository to avoid this issue.
1069278 - 5.9.0 n/a Issue: The agent installation URL generated by the remote command ComputerMgmt.createAgentDeploymentUrlCmd fails to allow file download.

Resolution: Use the graphical user interface to generate the agent installation URL.
1163947 KB88000 5.9.0 n/a Issue: You see the following error during ePO installation:
Setup was unable to access the SQL UDP port 1434 on the specified SQL Server
Resolution: Verify that the remote connection to the SQL service works, and that the SQL Server process is up and running on the specified port: See the related article for details.
968675 - 5.1.1 n/a Issue: The client task object structure changed in ePO 5.1.1, so that the EPOTaskObject table in the ePO database now has a different set of columns from all previous versions. This change was made to support newly added parameters for the new architecture. As a result, client task sharing is not supported from ePO 5.1.1 or later to any earlier version of ePO, for example: 5.1.x, 5.0.x. Client task sharing still works between ePO 5.1.1 servers and later.

Resolution: Disable client task sharing until all ePO servers are migrated to ePO 5.1.1 or later, and then re-enable sharing.
1173148 KB90379 5.1.0 n/a Issue: Unable to group by event product code.

Resolution: After you upgrade to a new version of ePO, some of the columns can be renamed or removed. In such scenarios, the upgrade flow edits existing query definitions in the database. The queries that are already exported to a file have older definitions, and do not work in newer versions of ePO. You must create a query in such scenarios.
917943 KB77920 5.1.0 n/a Issue: Page buttons display in the ePO 5.x System Tree after you upgrade from ePO 4.6.4 or later.

Resolution: Clear the browser cache. See the related article for details.
913365 - 5.1.0 n/a Issue: It is not explicitly stated in the Custom URL Viewer monitor dialog that only input that contains the full URL is acceptable.

Resolution: Type the full URL into the Custom URL Viewer monitor dialog.
848248 - 5.1.0 n/a Issue: VirusScan Enterprise Access Protection blocks the functionality of the Upgrade Compatibility Utility.

Resolution: If you have VirusScan Enterprise on your source or target systems, disable the Access Protection feature during the installation.
823342 - 5.1.0 n/a Issue: The Software Manager features Check in all and Automatic Product Download do not support product extension packages that contain multiple ZIP components, for example: Host Intrusion Prevention and MRA. This fact might give the impression that all extensions are up to date when they are not.

Resolution: Download the extensions for Host Intrusion Prevention and MRA and check them in manually.
816475 - 5.1.0 n/a Issue: The McAfee ePO server Snapshot status does not change to the orange Snapshot is Out of Date status when you remove an Agent Handler from a remote system.

Resolution: The issue resolves itself within five minutes.
813461 - 5.1.0 n/a Issue: When you cancel the migration utility before a migration is complete, the Program Files (x86)\ePolicy Orchestrator folder and some registry keys are left behind on the target system.

Resolution: Delete the ePO installation folder and the registry keys from the target system.
780095 - 5.1.0 n/a Issue: When you use a web browser to access the Web API directly, the browser caches credentials, which potentially leads to a privilege escalation. If a privilege escalation occurred, users might be granted access to data or commands for which they are not authorized.

Resolution: The purpose of the Web API is for programmatic automation of tasks. If you choose to use a web browser to access the Web API directly, for example: https://servername:port/remote/core.help, close your browser window after you have finished to clear your cached credentials.
763783 - 5.1.0 n/a Issue: When you check in a different major product version when an existing product and hotfix are checked in to ePO 5.3, the hotfix is deleted.

Resolution: Move the hotfix to a different branch before you check in a new package. Or, you can check the hotfix back into the repository after you check in the major version.
n/a = not applicable
GA = General Availability

Back to Top
Reference Number Related
Issue Description
1236435 - 5.10.0 - Issue: The Agent Handler (AH) and Data Exchange Layer (DXL) instances that are manually closed from the AWS console do not get removed from the ePO console.

Resolution: You must manually remove the AH and DXL entries from ePO console. AH and DXL entries are removed from ePO console only if instances are closed using AWS Auto Scaling Group.
1237618 - 5.10.0 n/a
Issue: After you create the first AutoUpdate ePO stack, two emails are unexpectedly sent to the person mentioned as the operator of the stack.
Explanation: The cause of this issue is a limitation with how AWS handles paused and resumed pipelines. Subsequent auto-updates send only one email.
1238250 - 5.10.0 n/a Issue: Delete operation of a stack fails when the AutoUpdate of AH and DXL is in progress.

Resolution: Do not try to delete a stack while the AutoUpdate of Agent Handler or DXL is in progress. Only try the delete after the AutoUpdate is complete.
n/a = not applicable

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.