Application and Change Control Global Threat Intelligence registered server connection fails in ePO 5.10.x

Technical Articles ID: KB91492
Last Modified: 1/9/2020

Environment

McAfee Application and Change Control (MACC) 8.2.x
McAfee ePolicy Orchestrator (ePO) 5.10.x

Summary

An error can occur when you try to test the connection between ePO 5.10 and the Global Threat Intelligence (GTI) server.

Problem

When you test connectivity between the MACC 8.2.x registered server in ePO 5.10.x, the GTI servers fail with an Internal Server Error.

The orion.log file records the following error:

ERROR [scheduler-InternalTask-thread-8] common.ScorInternalTask - Exception occurred while running internal task with UID: com.mcafee.scor.cloud.internalTask.FetchCloudDetailsTaskNewHashes org.bouncycastle.crypto.fips.FipsUnapprovedOperationError: Attempt to use RSA key with non-approved size: 4096: RSA

Cause

4096-bit RSA key length is not supported in ePO 5.10 because of changes in the cryptologic library.

Solution

This issue resolved in Application Control Extension 8.2.1.229.

Workaround

To support ePO 5.10, update the MACC client keys with 2048-bit keys instead of 4096 length keys. Follow the steps below:

Download the UpdateClientCertSqlQuery.zip file from this article and extract.
Start MySQL Management Studio.
Select the ePO Database from the databases available in the MySQL Management Studio drop-down list.
Execute the extracted script using MySQL Management Studio.
Upon successful execution of this script, run the following ePO remote command using browser:

https://<ePO IP>:<port>/remote/core.reload-plugin.do?name=SOLIDCORE_META

Attachment

UpdateClientCertSqlQuery.zip
3K • < 1 minute @ broadband

Affected Products

Application and Change Control 8.2.x
ePolicy Orchestrator 5.10.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Application and Change Control Global Threat Intelligence registered server connection fails in ePO 5.10.x

Environment

Summary

Problem

Cause

Solution

Workaround

Attachment

Affected Products

Languages:

Title

Title

Knowledge Center

Application and Change Control Global Threat Intelligence registered server connection fails in ePO 5.10.x

Environment

Summary

Problem

Cause

Solution

Workaround

Attachment

Affected Products

Languages:

Choose your region

Title

Title