How to use MER Tool with MACC enabled in Update mode

Artículos técnicos ID: KB94658
Última modificación: 7/6/2021

Entorno

McAfee Application and Change Control (MACC) 8.x, 7.x, 6.x
McAfee Minimum Escalation Requirements (MER) Tool

Resumen

MER has updated its code-signing certificate. McAfee has added the certificate as a trusted publisher to make sure proper function of MER that is maintained on systems protected by MACC.

For ePO-Managed Systems

NOTE: Only an ePO administrator must perform the following steps.

Solidcore Rules:

Download and extract the McAfeePublisher.xml file attached to this article.
Go to Configuration, Solidcore Rules, and click Import.
Select the previously extracted McAfee Publisher rule groups XML file and select the Overwrite duplicate groups option and click OK.
After the import, examine the server task log and verify that the import was successful.
Use an existing (or create) server task Solidcore: Rule Group Sanity Check, and verify the results.

Application Control Rules (Windows) - McAfee Application (McAfee Default):

If any endpoint has the McAfee Applications (McAfee Default) policy assigned, force the policy update on that endpoint using the Wake Up Agents button.

Application Control Rules (Windows) - Custom policy:

If any endpoint has assigned any custom policy that contains the McAfee Publisher rule group, force a policy update on that endpoint using the Wake Up Agents button.

If an endpoint has assigned any custom policy, and if the McAfee Applications default policy or McAfee Publisher rule group is not assigned to any policy, then:

Download and extract the McAfee Publisher rule McAfeePublisher.xml file attached to this article
Add the McAfee Publisher rule group to your Custom Policy.
Apply these policies to the endpoints.

For Standalone Installations of Application Control:

Download and save the archive file attached to this article.
To change MACC to Update mode, run the following command:

sadmin bu
Place the certificate file in the folder C:\Program Files\McAfee\Solidcore\Certificates.
To register the certificate file, run the following command:

sadmin cert add -u "C:\Program Files\McAfee\Solidcore\Certificates\McAfeeMER.cer"
To verify if the certificate files are registered successfully, run the following command:

sadmin cert list.
To change Application Control back to Enable mode, run the following command:

sadmin eu

Archivo adjunto

McAfeePublisher.xml
23K • < 1 minute @ broadband

Archivo adjunto

McAfeeMER.7z
1K • < 1 minute @ broadband

Productos implicados

Application and Change Control 8.3.x
Application and Change Control 8.2.x
Application and Change Control 8.1.x
Application and Change Control 8.0.x
Application and Change Control 7.0.x
Application and Change Control 6.5.x
Application and Change Control 6.4.x
Application and Change Control 6.3.x
Application and Change Control 6.2.x
Application and Change Control 6.1
Diagnostic Data Collection
Troubleshooting

Idiomas:

Este artículo se encuentra disponible en los siguientes idiomas:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Glosario de términos técnicos

Resaltar los términos del glosario

Tómese un momento para consultar nuestro Glosario de términos técnicos.

Knowledge Center

How to use MER Tool with MACC enabled in Update mode

Entorno

Resumen

Archivo adjunto

Archivo adjunto

Productos implicados

Idiomas:

Glosario de términos técnicos

Title

Title

Knowledge Center

How to use MER Tool with MACC enabled in Update mode

Entorno

Resumen

Archivo adjunto

Archivo adjunto

Productos implicados

Idiomas:

Glosario de términos técnicos

Elija su región

Title

Title