Knowledge Center

McAfee Agent 5.6.x Known Issues
Technical Articles ID:   KB90993
Last Modified:  9/10/2019


McAfee Agent (MA) 5.6.x


Recent updates to this article:
Date Update
September 10, 2019 Added details about McAfee Agent 5.6.2 and updated issues that it resolves.
July 17, 2019 Added:
  • MA 5.6.1 Hotfix 3 (General Availability).
  • Reference ENSW-26779 to the critical section.
Updated resolution for MA-2136 and SB10288.
July 12, 2019  MA 5.6.1 Hotfix 2 has changed from, General Availability to Released to Support.
July 11, 2019 Added details about MA 5.6.1 Hotfix 2 being removed from the Product Downloads site.
July 10, 2019 Added:
  • MA 5.6.1 Hotfix 2 (General Availability) to resolve CVE-2019-3592.
  • Reference MA-2136.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Product release information
McAfee Agent (MA) Release date
MA 5.6.2 (General Availability) September 10, 2019
MA 5.6.1 Hotfix 3 (General Availability) July 17, 2019
MA 5.6.1 Hotfix 2 (General Availability)
(no longer available) 3
July 8, 2019
MA 5.6.1 Hotfix 1 (Released to Support) 1 June 21, 2019
MA 5.6.1 (General Availability) May 14, 2019
MA 5.6.0 Hotfix 2 (Released to Support) 1 April 4, 2019
MA 5.6.0 Hotfix 1 (1264214) (General Availability)2
February 26, 2019
MA 5.6.0 (General Availability) December 11, 2018
McAfee investigated this issue and a solution is currently available. This solution is currently not generally available, but is in Released to Support (RTS) status. To obtain the RTS build, log on to the ServicePortal and create a Service Request (https://support.mcafee.com/ServicePortal/faces/serviceRequests/createSR). Include this article number in the Problem Description field.

See KB51560 for detailed information on release cycles.
2 MA 5.6.0 Hotfix 1 (1264214) (GA) is no longer available due to an issue found post-release and documented in KB91418.
3 MA 5.6.1 Hotfix 2 (GA) is no longer available because of an issue found post-release and documented in KB91655.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, visit the Product Downloads site at http://www.mcafee.com/us/downloads/downloads.aspx.

Known Issues
NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision.

Click to expand the section you want to view:

Issue Description
KB91655 5.6.1
Hotfix 2
5.6.2 Issue: Product compatibility issues with McAfee Agent 5.6.1 Hotfix 2 and the following products:
  • Data Loss Prevention Endpoint
  • Endpoint Security Firewall
Workaround: See the related article for details.

NOTE: Previously resolved by MA 5.6.1 Hotfix 3.
n/a SB10288
5.6.0 5.6.2 Issue: [Security] Privilege escalation vulnerability CVE-2019-3592. Applies to MA, which allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory. For details, see the related article.

Resolution: Restricted permissions have been added to the install folder to address the vulnerability.

NOTE: For a known issue post-installation of MA 5.6.1 HF2, see reference number MA-2136 in the Non-critical known issues section.

NOTE: Previously resolved by MA 5.6.1 Hotfix 3.
KB91611 5.6.0 5.6.2 Issue: [Installation] Installation intermittently fails. McAfee Agent installer uses a deprecated legacy API to autoregister COM objects, which intermittently fails to register and so the install fails.

Workaround: Rerun the McAfee Agent installer multiple times for successful installation.

NOTE: Previously resolved by MA 5.6.1 Hotfix 1.
MA-2408 - - 5.6.2 Issue: masvc crashes intermittently when accessing the freed memory. (Windows only)
1270312 1270396
KB91418 5.6.0
Hotfix 1
5.6.1 Issue: Events generated by some clients are sent back to ePolicy Orchestrator if the system enters the sleep mode or hibernation mode when the event generation is in progress. The reason is because the events are not properly removed from the queue.  
1270609 SB10282 5.6.0 5.6.1 Issue: [Security] OpenSSL needs to be upgraded to 1.0.2r to fix a security vulnerability in OpenSSL.

Resolution: McAfee Agent has bundled OpenSSL 1.0.2r.
1264004  SB10272 5.6.0 5.6.1 Issue: [Security] Incorrect buffer memory access vulnerability. 
1265828 SB10271 5.6.0 5.6.1 Issue: [Security] Disclosure vulnerability as part of remote logging feature.

Resolution: This issue is addressed by disabling the "Remote Logging" feature and introducing the "Single System Troubleshooting" feature. For more information about "Single System Troubleshooting" feature, see KB91283.
1258401 KB91003 5.6.0 n/a Issue: Incompatibility with McAfee Active Response 2.3 or 2.4 with McAfee Agent 5.6 and Data Exchange Layer 5.0.
Resolution: If you use the McAfee Active Response client, you must first install a mandatory hotfix on all systems that run the client before you install McAfee Agent 5.6.0 on those systems. See the related article for details.
Issue Description
MA-2136 KB91643
Hotfix 2
5.6.2 Issue: When a lower version of MA is forcefully installed over MA 5.6.1 Hotfix 2 using the command prompt, the installer is invoked with the logged in user privileges, which do not have the permissions to access the install folder, and the install fails with the error:
The directory name is invalid

Resolution: To overcome the downgrade issue, see the related article
NOTE: Previously resolved by MA 5.6.1 Hotfix 3.
- 5.6.0 5.6.2 Issue: The McAfee Agent executables fail to start when the "libeay32.dll" file in the OpenSSL library fails to load at the preferred base address.
NOTE: Previously resolved by MA 5.6.1 Hotfix 1.
MA-2409 - - 5.6.2 Issue: [Installation] McAfee Agent reuses the GUID when reinstalled using McAfee SmartInstaller. This reuse results
in an agent-server communication failure. (Linux only)
MA-2407 - - 5.6.2 Issue: The product deployment and update tasks fails to run. (Windows only)

Resolution: McAfee Agent now has additional protection to trust unsigned Windows program files.successfully.
MA-1970 - - 5.6.2 Issue: After the Daylight Saving Time change, the agent-server communication interval (ASCI) doesn't run at the scheduled interval. (Linux and Mac)
MA-4537 - - 5.6.2 Issue: The agent-server communication fails after the operating system upgrade. (Mac only)
1261724  - 5.6.0 5.6.1 Issue: [Updater] Update task times out after two hours while downloading a file. The result is an update failure in environments with slow network bandwidth. 

Resolution: File download timeout is increased to five hours during an update task. (Windows, Linux, and macOS)
1264214   5.6.0 5.6.1 Issue: [Installation] Data Exchange Layer (DXL) failed to install or upgrade during the McAfee Agent install or upgrade due to a previously mirrored incorrect registry entry.

Resolution: McAfee Agent now invokes DXL installer successfully. (Windows)
1265126 - 5.6.0
5.6.1 Issue: [Installation] The Product Improvement Program (PIP) (Telemetry) can be unexpectedly enabled in the Server Settings page after you upgrade the McAfee Agent extension to MA Hotfix 1264214 (build This action might result in the unexpected deployment of the PIP software to endpoints across the environment.
1263125 - 5.6.0 5.6.1 Issue: [Installation] McAfee Agent resolves an issue with two DXL installers packaged as part of install.sh. (Linux
1267224 - 5.6.0 5.6.1 Issue: McAfee Agent used SysV approach to start its services, and used SystemD approach if Sysv was unavailable.
1270400 - 5.6.0 5.6.1 Issue: Events generated at some clients are sent back to ePolicy Orchestrator if the system enters sleep mode or hibernation mode when the event generation is in progress. This occurs because the events are not properly removed from the queue (Windows only).
1265336 KB91265 5.6.0 - Issue: On Linux systems, segfault occurs recorded against the masvc process and McAfee Agent services are stopped.
KB91185 5.6.0 n/a Issue: Reports that cover Managed Mac operating systems disappear after you upgrade to McAfee Agent 5.6.0 or later. McAfee Agent 5.6.0 and later report the Mac operating system as either 'macOS' or 'MAC OS X'.

Resolution: A design change occurred in McAfee Agent 5.6.0 regarding the reporting of the Mac operating system. 
  • McAfee Agent 5.5.x reported the OS Type value only as Mac OS X.
  • McAfee Agent 5.6.0 and later report the macOS Type as macOS or MAC OS X. See the related article for details.
Update your reports and set the OS Type value to macOS.
1238363 - 5.6.0 - Issue: McAfee Agent settings display incorrect values when policies are compared using Policy comparison.
1262433 - 5.6.0 -
Issue: After you uninstall the McAfee Agent with uninstall.sh on a Linux operating system that also has Endpoint Security for Linux installed, the following misleading message is displayed on the console: Agent got uninstalled.
You can safely ignore this message. The McAfee Agent is not uninstalled because of the dependency by Endpoint Security for Linux. A future update addresses this cosmetic issue.
1262432 - 5.6.0 - Issue: The Incompatibility Check policy located under McAfee Agent, General, is disabled when policies are imported with the policy import option.
1220515 - 5.5.0 - Issue: The McAfee Agent Smart Installer does not support configuration of a RelayServer through the command line.
1155972 - 5.0.5 - Issue: When the McAfee Agent mode is changed from 'managed' to 'self-managed' on Windows operating systems, EpoServerLastUsed and LastASCTime registry keys still contain managed information.
1168133 - 5.0.2 - Issue: If the system time is changed while a task is in progress, the task is immediately freed up.
1174728 - 5.0.4 - Issue: Tasks are scheduled beyond the "until" time if:
  • The task is set to "repeat until" a specific date and time.
  • Daylight Saving Time (DST) shifts the clock one hour ahead of the actual time.
1077826 KB85224 5.0.2 - Issue: An upgrade of McAfee Agent to version 5.0.x fails if the Prevent Programs Registering as a Service rule is blocked in the Access protection policy of VirusScan Enterprise.

Workaround: Disable the Prevent Programs Registering as a Service rule in the Access Protection policy for VirusScan Enterprise, and then retry the upgrade.
1067653 - 5.0.1 - Issue: A duplicate node entry is created for a Linux system if you upgrade from McAfee Agent 5.x.x to McAfee Agent 5.x.x with McAfee Smart Installer.

Workaround: If you notice duplicate entries, schedule a server task to identify duplicate entries and delete the inactive node. See the ePolicy Orchestrator Product Guide for instructions on how to schedule a server task.
1040305 - 5.0.1 - Issue: Agent deployment tasks download the FrameworkConfig.zip and FrameworkInstall.zip files even though they are not used by agent deployment tasks.
1031325 - 5.0.1 - Issue: The next runtime of a task is not recalculated when you change the randomization interval value for a local task.
1029656 - 5.0.1 - Issue: A missed task does not execute if the task is scheduled to run repeatedly.
1024771 - 5.0.1 - Issue: Messages in Agent Monitor are not logged sequentially.
982072 - 5.0.1 - Issue: Customized policies are not enforced on clients while McAfee Agent is switched between modes (managed or unmanaged).
KB86939 5.0.0   Issue: On non-Windows systems, McAfee Agent 5.x is unable to listen for wake-up calls on ports lower than 1024.
Workaround: See the related article for details.
990577 KB82895 5.0.0 - Issue: Managed tasks do not appear in the VirusScan Enterprise console after you install McAfee Agent 5.0.x.
Workaround: Restart the VirusScan Enterprise Task Manager (VsTskMgr.exe) when you create new managed tasks. See the related article for details.
989633 KB77630 5.0.0 - Issue: Incorrect system properties for operating system Build Number, Total disk space, Used disk space, and Free System Drive Space are displayed in ePO for non-Windows systems.
934776 - 5.0.0 - Issue: When you compare client tasks in ePO, the output displays string IDs instead of the actual strings.
1135834 - 5.0.0 - Issue: Policy changes are not applied as designed until the user logs on again or reboots the system for the Security Innovation Alliance partner product Avecto DefendPoint. This fact affects Microsoft Active Directory domain user accounts, but does not affect Windows local user accounts, for which policy updates still occur live.
1060850 - 5.0.1 n/a Issue: McAfee Agent fails to schedule the on-demand scan task post upgrade when VirusScan Enterprise is present.

Resolution: After you restart the system, McAfee Agent schedules the task successfully.
1070435 KB84917 5.0.1 n/a
Issue: The following error occurs while you uninstall McAfee Agent with the Frminst.exe /forceuninstall command:
"This action is only valid for products that are currently installed"
Resolution: Run the Microsoft MSIZAP (msizap.exe) tool to remove the remnants of McAfee Agent 4.x.x. See the related article for details.
1131469 - 5.0.3 n/a Issue: If you change the system time multiple times, the next agent-server communication interval (ASCI) time value is printed incorrectly in the McAfee Agent Status Monitor. This incorrect value has no impact on the ASCI.

Resolution: On the next scheduled ASCI, the time value is corrected automatically.
- KB87110 5.0.2 Hotfix 1110392 and 5.0.3 and later n/a Issue: After you perform the following installation sequence, the system is vulnerable to the trusted access bypass vulnerability described in SB10151 after you upgrade McAfee Agent:
  1. Install McAfee Agent 4.8.x and Host Intrusion Prevention 8.x or Data Loss Prevention Endpoint 9.x (or both) on the client.
  2. Upgrade McAfee Agent to 5.0.2 Hotfix 1110392 or 5.0.3 and later.
Resolution: Restart the system after you upgrade McAfee Agent to completely mitigate the trusted access bypass vulnerability in this scenario.
1109811 - 5.0.2 Hotfix 1110392 and 5.0.3 and later n/a Issue: McAfee Agent 5.0.2 Hotfix 1110392 and later, which uses SysCore and later, fails to install on Windows 7 operating systems.

Resolution: Install the Microsoft fix documented in https://support.microsoft.com/en-us/kb/2328240 before the McAfee Agent installation.
1175956 KB88972 5.0.5 n/a Issue: VirusScan Enterprise 8.8.0 Patch 4 and earlier does not whitelist McAfee Agent executables. Access Protection hits are generated for masvc.exe if VirusScan Enterprise 8.8.0 Patch 4 and earlier versions are installed.

Resolution: Restart the client after you install VirusScan Enterprise 8.8 Patch 4 or earlier.
1181853 - 5.0.4 n/a Issue: The macOS computer hangs and McAfee Agent does not respond for about five minutes when the following conditions occur in the listed order:
  1. You enable Endpoint Security for Mac (ENSM) Threat Prevention On-Access Scan (OAS).
  2. You upgrade to macOS to version 10.12.3.
  3. You upgrade McAfee Agent.
Resolution: The McAfee Agent process, Macompatsvc, takes some time to start if ENSM Threat Prevention OAS is enabled. Wait for the McAfee Agent process to start after the operating system upgrade, and then perform the McAfee Agent upgrade.
965063 KB82896 5.0.0 n/a
Issue: The McAfee Agent 4.x logging policy does not migrate to the 5.x remote logging policy.

Resolution: Update any existing McAfee Agent Logging policies to the new settings. For more details about the new settings, see PD25187.
953245 KB83195 5.0.0 n/a Issue: A Program Compatibility Assistant pop-up window displays when you close SmartInstaller.exe installation windows for McAfee Agent 5.x on Windows 7.

Workaround: You can safely ignore the pop-up window and select "The program installed correctly" to close the window. See the related article for details.
- - 5.0.0 n/a Issue: The agent monitor displays an 'Agent service is now stopped' status.

Cause: A restart initiated by group policy is applied to clients with McAfee Agent 4.x.x. This restart changes the McAfee Agent Backwards Compatibility Service state from manual to automatic.

This issue also occurs on a fresh installation of McAfee Agent 5.x when there is a Group Policy set to enable McAfee services, or any other third-party application that do the same.

Workaround: Disable this group-level policy on systems that run McAfee Agent 5.0.0 and later because McAfee Agent now has an automatic recovery mechanism when stopped unexpectedly.
- KB85870 5.0.0 n/a Issue: McAfee Agent or ePO installation fails with the following error when KB3072630 is installed:
Error 1911.Could not register type library for file C:\Program Files (x86)\McAfee\Common Framework\ComponentUserInterface.dll
Resolution: Verify that Microsoft Windows updates KB3072630 and KB3139923 are both present and installed on the impacted system. See the related article for details.
- KB83123 5.0.0 n/a Issue: A compatibility issue exists with third-party "hooking" applications when SysCore 15.3 is installed.

Resolution: See the related article for details.
Expected Behavior
1253297 - 5.6.0 Expected
Issue: An uninstall of McAfee Agent on a Linux operating system using rpm -e MFEcma only uninstalls McAfee Agent and not Data Exchange Layer (DXL) 5.0.0.

Resolution: See the McAfee Agent 5.6.x Installation Guide for the correct usage of uninstall commands.
- KB90077 5.5.0 Expected
Issue: McAfee Agent update policies appear incorrectly after you upgrade the McAfee Agent extension from 5.0.x to 5.5.0, or when policies are imported.

Resolution: This issue relates to web browser caching. See the related article for details.
1044276 KB85762 5.0.1 Expected
Issue: The McAfee Agent Backwards Compatibility Service is not protected by VirusScan Enterprise if the agent's self-protection policy is disabled.

Resolution: To protect McAfee Agent Backwards Compatibility Service, always enable the self-protection policy for McAfee Agent.
1035603 - 5.0.1 Expected
Issue: Intermittently, McAfee Agent on Mac OS X fails to collect and send properties to the McAfee ePO server.

Resolution: On the next agent wake-up call, McAfee Agent will collect and send the latest properties to the McAfee ePO server.
972679 KB82897 5.0.0 Expected
Issue: McAfee Agent 4.5 upgrades to 5.x are not supported.
Resolution: You must remove all McAfee Agent installations earlier than McAfee Agent 4.6 or upgrade to McAfee Agent 4.6 Update 3 before you upgrade to McAfee Agent 5.x. See the related article for details.
n/a - not applicable. Resolution did not require an McAfee Agent-specific solution.
Back to top

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.