If you try to execute the SSSO tool with MACC enabled, you might observe some denials. McAfee Enterprise has added the certificate as a trusted publisher to make sure proper functionality of SSSO is maintained on the systems protected by MACC.
For ePO-managed systems
NOTE: Only an ePO administrator should perform the following steps.
Solidcore rules:
- Download and extract the McAfeePublisher.xml file that is attached to this article.
- Go to Configuration, Solidcore Rules, and click Import.
- Select the previously extracted McAfee Publisher rule groups XML file, select the Overwrite duplicate groups option, and then click OK.
- After the import, examine the server task log and verify that the import was successful.
- Use an existing (or create) the server task Solidcore: Rule Group Sanity Check, and verify the results.
Application Control Rules (Windows) – McAfee Default policies:
If any endpoint has the McAfee Default policy assigned, force the policy update on that endpoint using the Wake Up Agents button.
Application Control Rules (Windows) - Custom policy:
If any endpoint has assigned any custom policy that contains the McAfee Publisher rule group, force a policy update on that endpoint using the Wake Up Agents button.
If an endpoint has assigned any custom policy, and if the McAfee Applications default policy or McAfee Publisher rule group is not assigned to any policy, do the following:
- Download and extract the McAfee Publisher rule McAfeePublisher.xml file attached to this article.
- Go to Configuration, Solidcore Rules, and click Import.
- Select the previously extracted McAfee Publisher rule groups XML file, select the Overwrite duplicate groups option, and then click OK.
- Add the McAfee Publisher rule group to your Custom Policy.
- Apply these policies to the endpoints.
- Install all the necessary SSSO prerequisites. For more details, see KB92519 - Self-Service Supportability Orchestrator data collection tool.
For standalone installations of Application Control:
- Download and save the archive file McAfeeSSSO.7z that is attached to this article.
- To change MACC to Update mode, run the following command:
sadmin bu
- Place the certificate file in the folder C:\Program Files\McAfee\Solidcore\Certificates.
- To register the certificate file, run the following command:
sadmin cert add -u "C:\Program Files\McAfee\Solidcore\Certificates\McAfeeSSSO.cer"
- To verify if the certificate files are registered successfully, run the following command:
sadmin cert list
- Install all the necessary SSSO prerequisites. For more details, see KB92519 - Self-Service Supportability Orchestrator data collection tool.
- To change Application Control back to Enable mode, run the following command:
sadmin eu
