Portuguesechrome

InstallationGuideMcAfeeePolicyOrchestrator5.
1.
0SoftwareCOPYRIGHTCopyright2013McAfee,Inc.
Donotcopywithoutpermission.
TRADEMARKATTRIBUTIONSMcAfee,theMcAfeelogo,McAfeeActiveProtection,McAfeeCleanBoot,McAfeeDeepSAFE,ePolicyOrchestrator,McAfeeePO,McAfeeEMM,Foundscore,Foundstone,PolicyLab,McAfeeQuickClean,SafeEyes,McAfeeSECURE,SecureOS,McAfeeShredder,SiteAdvisor,McAfeeStinger,McAfeeTotalProtection,TrustedSource,VirusScan,WaveSecurearetrademarksorregisteredtrademarksofMcAfee,Inc.
oritssubsidiariesintheUnitedStatesandothercountries.
Othernamesandbrandsmaybeclaimedasthepropertyofothers.
Productandfeaturenamesanddescriptionsaresubjecttochangewithoutnotice.
Pleasevisitmcafee.
comforthemostcurrentproductsandfeatures.
LICENSEINFORMATIONLicenseAgreementNOTICETOALLUSERS:CAREFULLYREADTHEAPPROPRIATELEGALAGREEMENTCORRESPONDINGTOTHELICENSEYOUPURCHASED,WHICHSETSFORTHTHEGENERALTERMSANDCONDITIONSFORTHEUSEOFTHELICENSEDSOFTWARE.
IFYOUDONOTKNOWWHICHTYPEOFLICENSEYOUHAVEACQUIRED,PLEASECONSULTTHESALESANDOTHERRELATEDLICENSEGRANTORPURCHASEORDERDOCUMENTSTHATACCOMPANYYOURSOFTWAREPACKAGINGORTHATYOUHAVERECEIVEDSEPARATELYASPARTOFTHEPURCHASE(ASABOOKLET,AFILEONTHEPRODUCTCD,ORAFILEAVAILABLEONTHEWEBSITEFROMWHICHYOUDOWNLOADEDTHESOFTWAREPACKAGE).
IFYOUDONOTAGREETOALLOFTHETERMSSETFORTHINTHEAGREEMENT,DONOTINSTALLTHESOFTWARE.
IFAPPLICABLE,YOUMAYRETURNTHEPRODUCTTOMCAFEEORTHEPLACEOFPURCHASEFORAFULLREFUND.
2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideContentsPreface5Aboutthisguide5Audience5Conventions5Findproductdocumentation61Installationrequirementsandrecommendations7Hardwarerequirementsandrecommendations7Softwarerequirementsandrecommendations8Supportedoperatingsystems9Supportedvirtualinfrastructuresoftware10SupportedSQLServers10SupportedInternetbrowsers11AgentHandlerserverrequirements11Thingstoknowbeforeinstallation11AbouttheSQLServerinstallationdocumentedinthisguide12AbouttheSQLServerrolesrequiredforinstallation13AboutHTTPportoptions13Automaticproductconfiguration14Distributedrepositoryrequirements14Supportedproductsandknownissues152InstallingMcAfeeePolicyOrchestrator17Initialinstallationoptions17PerformExpressinstallation18SetupExpressinstallation19CompleteExpressinstallation20PerformCustominstallation21SetupCustominstallation22CompleteCustominstallation23Performclusterinstallation25InstallonWindowsServer200826InstallonWindowsServer201229TesttheePolicyOrchestratorclusterinstallation32InstallremoteAgentHandlers32InstallremoteAgentHandlers32Completeafirst-timeinstallation333RestoringMcAfeeePolicyOrchestrator35Restoresoftwareinstallationoptions35InstallePolicyOrchestratorsoftwareontherestoreserver36RestoreePolicyOrchestratorsoftwareinaclusterenvironment38RestoreremoteAgentHandlerconnections404UpgradingePolicyOrchestratorsoftware43McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide3Thingstodobeforeupgrading43Supportedproductsandknownissues44BackupePolicyOrchestratordatabasesanddirectories44DisableremoteAgentHandlersbeforeupgrading44UpgradeCompatibilityUtilityoverview45Runtheutility48UpgradeyourePolicyOrchestratorserver50UpgradeyourePolicyOrchestratorClusterserver51UpgradeyourremoteAgentHandlers525UninstallingePolicyOrchestratorsoftware53UninstallExpressandCustominstallations53Uninstallclusterinstallations546Troubleshootingandlogfilereference55Commoninstallationmessagesandtheircausesandsolutions55Logfilesfortroubleshooting57Installerlogs58Serverlogs59Agentlogs61Index63Contents4McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuidePrefaceContentsAboutthisguideFindproductdocumentationAboutthisguideThisinformationdescribestheguide'stargetaudience,thetypographicalconventionsandiconsusedinthisguide,andhowtheguideisorganized.
AudienceMcAfeedocumentationiscarefullyresearchedandwrittenforthetargetaudience.
Theinformationinthisguideisintendedprimarilyfor:Administrators—Peoplewhoimplementandenforcethecompany'ssecurityprogram.
Users—Peoplewhousethecomputerwherethesoftwareisrunningandcanaccesssomeorallofitsfeatures.
Reviewers—Peoplewhoevaluatetheproduct.
ConventionsThisguideusesthesetypographicalconventionsandicons.
Booktitle,term,emphasisTitleofabook,chapter,ortopic;anewterm;emphasis.
BoldTextthatisstronglyemphasized.
Userinput,code,messageCommandsandothertextthattheusertypes;acodesample;adisplayedmessage.
InterfacetextWordsfromtheproductinterfacelikeoptions,menus,buttons,anddialogboxes.
HypertextblueAlinktoatopicortoanexternalwebsite.
Note:Additionalinformation,likeanalternatemethodofaccessinganoption.
Tip:Suggestionsandrecommendations.
Important/Caution:Valuableadvicetoprotectyourcomputersystem,softwareinstallation,network,business,ordata.
Warning:Criticaladvicetopreventbodilyharmwhenusingahardwareproduct.
McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide5FindproductdocumentationMcAfeeprovidestheinformationyouneedduringeachphaseofproductimplementation,frominstallationtodailyuseandtroubleshooting.
Afteraproductisreleased,informationabouttheproductisenteredintotheMcAfeeonlineKnowledgeBase.
Task1GototheMcAfeeTechnicalSupportServicePortalathttp://mysupport.
mcafee.
com.
2UnderSelfService,accessthetypeofinformationyouneed:Toaccess.
.
.
Dothis.
.
.
Userdocumentation1ClickProductDocumentation.
2Selectaproduct,thenselectaversion.
3Selectaproductdocument.
KnowledgeBaseClickSearchtheKnowledgeBaseforanswerstoyourproductquestions.
ClickBrowsetheKnowledgeBaseforarticleslistedbyproductandversion.
PrefaceFindproductdocumentation6McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide1InstallationrequirementsandrecommendationsYourenvironmentneedstoincludespecifichardwareandsoftwaretorunMcAfeeePolicyOrchestrator5.
1.
ReviewtheserequirementsandrecommendationsbeforeinstallingyourMcAfeeePOsoftwaretomakesurethatyourinstallationissuccessful.
ContentsHardwarerequirementsandrecommendationsSoftwarerequirementsandrecommendationsSupportedoperatingsystemsSupportedvirtualinfrastructuresoftwareSupportedSQLServersSupportedInternetbrowsersAgentHandlerserverrequirementsThingstoknowbeforeinstallationAutomaticproductconfigurationDistributedrepositoryrequirementsSupportedproductsandknownissuesHardwarerequirementsandrecommendationsMakesurethatyourenvironmentconformstotheserequirementsandrecommendationsbeforeinstallingePolicyOrchestratorsoftware.
ComponentRequirementsandrecommendationsDedicatedserverIfmanagingmorethan250systems,werecommendusingadedicatedserver.
DomaincontrollersTheservermusthaveatrustrelationshipwiththeDomainControlleronthenetwork.
Forinstructions,seetheMicrosoftproductdocumentation.
FilesystemNTfilesystem(NTFS)partitionrecommended.
Freediskspace5GB—RecommendedminimumIPaddressWerecommendusingstaticIPaddressesforePolicyOrchestratorservers.
ePolicyOrchestratorsupportsbothIPv4andIPv6networks.
Memory4GBavailableRAMrecommendedminimum1McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide7ComponentRequirementsandrecommendationsNetworkInterfaceCard(NIC)100MBorhigherIfusingaserverwithmorethanoneIPaddress,ePolicyOrchestratorsoftwareusesthefirstidentifiedIPaddress.
IfyouwanttousemoreIPaddressesforagentservercommunication,werecommendcreatingmoreAgentHandlergroupsforeachIPaddress.
SeeWorkingwithAgentHandlersintheePolicyOrchestratorSoftwareProductGuideorHelpfordetailsaboutsettingupAgentHandlergroups.
PortsWerecommendavoidingtheuseofport8443forHTTPScommunication.
Althoughport8443isthedefaultport,itisalsotheprimaryportusedbymanywebbasedactivities,itisatargetformaliciousexploitation,andsystemadministratorsarelikelytodisabletheportinresponsetoasecurityviolationoroutbreak.
Makesurethattheportsyouchoosearenotalreadyinuseontheserversystem.
NotifynetworkstaffoftheportsyouintendtouseforHTTPandHTTPScommunication.
InstallingthesoftwareonaDomainControllerissupported,butnotrecommended.
Processor64bitIntelPentiumDorhigher2.
66GHzorhigherSoftwarerequirementsandrecommendationsMakesureyouhavetherequiredandrecommendedsoftwareinstalledonyourserversystembeforeinstallingePolicyOrchestratorsoftware.
SoftwareRequirementsandrecommendationsMicrosoft.
NETFramework2.
0orlaterRequired—Youmustacquireandinstallthissoftwaremanually.
ThissoftwareisrequiredifyouselectaninstallationoptionthatautomaticallyinstallstheSQLServerExpress2008softwarebundledwiththisePolicyOrchestratorsoftware.
Ifthissoftwareismissing,youmustexittheSetupandacquireandinstallitmanuallybeforeproceeding.
MicrosoftupdatesRecommended—MakesureyourMicrosoftsoftwareisrunningthelatestupdates.
TurnoffWindowsupdatesbeforeyoubegininstallingorupgradingyoursoftware.
MicrosoftVisualC++2005SP1RedistributableRequired—Installedautomatically.
MicrosoftVisualC++2008RedistributablePackage(x86)Required—Installedautomatically.
MSXML6.
0Required—Installedautomatically.
1InstallationrequirementsandrecommendationsSoftwarerequirementsandrecommendations8McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideSoftwareRequirementsandrecommendationsSecuritysoftwareRecommended.
Installand/orupdatetheantivirussoftwareontheserverandscanforviruses.
Installand/orupdatefirewallsoftwareontheserver.
IfMcAfeeVirusScanEnterprise8.
5ior8.
7iisrunningonthesystemwhereyouareinstallingtheePolicyOrchestratorsoftware,youmustmakesurethattheVirusScanEnterpriseAccessProtectionrulesaredisabledduringtheinstallationprocess,ortheinstallationfails.
SupportedbrowserRecommended—Althoughitisnotaprerequisiteforinstallation,ePolicyOrchestratorsoftwarerequirestheuseofasupportedbrowser.
Youshouldacquireandinstallasupportedbrowsermanually.
Formoreinformation,seeSupportedInternetbrowsers.
SupportedSQLServerRequired—IfasupportedversionofSQLServerhasnotbeenpreviouslyinstalled,youcanchoosetoinstallSQLServer2008Expressautomatically.
SupportedoperatingsystemsYoucaninstallePolicyOrchestratoronanysupportedMicrosoftWindowsserverclassoperatingsystem.
SupportedserverclassoperatingsystemsThesoftwarerequiresoneofthesesupported64bitserverclassoperatingsystems.
SupportedOperatingSystem64bitWindowsServer2008(withServicePack2orhigher)XWindowsServer2012XUnsupportedoperatingsystemsYoucanevaluatetheePolicyOrchestratorsoftwareontheunsupportedWindows7orWindows8,64bit,operatingsystems.
InstallthisversionofePolicyOrchestratoronWindows7orWindows8forevaluationpurposesonly.
McAfeesupportisnotprovided.
OperatingsystemlanguageePolicyOrchestratorsoftwarerunsonanysupportedoperatingsystemregardlessofthelanguageoftheoperatingsystem.
TheePolicyOrchestratoruserinterfacehasbeentranslatedintothelanguagesinthislist.
Whenthesoftwareisinstalledonanoperatingsystemusingalanguagethatisnotonthislist,theinterfaceattemptstodisplaytextinEnglish.
Chinese(Simplified)JapaneseChinese(Traditional)KoreanDanishNorwegianDutchPortuguese(Brazilian)InstallationrequirementsandrecommendationsSupportedoperatingsystems1McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide9EnglishPortuguese(Iberian)FinnishRussianFrench(Standard)SpanishGerman(Standard)SwedishItalianTurkishSupportedvirtualinfrastructuresoftwareePolicyOrchestratorsoftwaresupportsuseofseveraltypesofvirtualinfrastructuresoftware.
Supportedvirtualinfrastructuresoftwareincludes:MicrosoftHyperVServer2008R2VMwareESX5.
1MicrosoftHyperVServer2012XenServer6VMwareESX5.
0SupportedSQLServersePolicyOrchestratorsoftwarerequirestheuseofasupportedSQLServer.
TheinstallationwizarddetectswhetherasupportedSQLServerisinstalledontheserversystemwhereyouareinstallingyoursoftware.
IfnoSQLServerispresent,thewizardpromptsyoutoinstallMicrosoftSQLServer2008Expresslocally,orselectanexistingSQLServer.
VersionEditionMicrosoftSQLServer2008R232and64bit(withServicePack1orlater)EnterpriseEditionExpressEditionStandardEditionWorkgroupEditionMicrosoftSQLServer201232and64bitEnterpriseEditionExpressEditionStandardEditionBusinessIntelligenceEditionRequiredSQLServerconfigurationsettingsePolicyOrchestratorsoftwarerequiressomespecificSQLServerconfigurationsettings.
Forinformationaboutworkingwiththesesettings,seeyourSQLServerdocumentation.
1InstallationrequirementsandrecommendationsSupportedvirtualinfrastructuresoftware10McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideConfigurationDetailsNestedtriggersTheSQLServerNestedTriggersoptionmustbeenabled.
DatabasecollationTheonlydatabasecollationsupportedbyePolicyOrchestratoristheU.
S.
Englishdefault:SQL_Latin1_General_Cp1_CI_AS.
MaintenancesettingsWerecommendmakingspecificmaintenancesettingstoePolicyOrchestratordatabases.
Forinstructions,seetheMcAfeeePolicyOrchestratorSoftwareProductGuideorHelp.
SupportedInternetbrowsersePolicyOrchestratorsoftwarerequirestheuseofoneofthesesupportedInternetbrowsers.
InternetExplorer8.
0andlater(IncludesfullsupportforCompatibilityMode)Chrome17andlaterFirefox10.
0andlaterSafari6.
0andlater(MACOSX,Windowsnotsupported)UsingInternetExplorerenhancedsecurityIfyou'reusingInternetExplorerwithenhancedsecurityenabled,youmustaddtheePolicyOrchestratorserveraddresstoyourInternetExplorertrustedsiteslist(formattedashttps://).
FailuretodosowilldisplayaYoumusthaveJavascriptenabledtousethisproducterrormessagewhenattemptingtologontotheePolicyOrchestratorserver.
AgentHandlerserverrequirementsYoucaninstalltheePolicyOrchestratorAgentHandlersoftwareonanysupportedMicrosoftWindowsserverclassoperatingsystem.
TheAgentHandlersoftwarerequiresoneoftheseserverclassoperatingsystems.
OperatingSystem32bit64bitWindowsServer2008XXWindowsServer2012XXThingstoknowbeforeinstallationBeforeyoustarttheePolicyOrchestratorinstallation,makesureyouunderstandtheinformationyouneed,itslocation,andthestepsyoumusttake.
Reviewthiscontentbeforebeginningyourinstallation.
Besurethatyouhaveread,understood,andcompliedwiththerequirementsandrecommendationsdetailedinInstallationrequirementsandrecommendationsbeforeyoubegintheinstallation.
InstallationrequirementsandrecommendationsSupportedInternetbrowsers1McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide11Havethisinformationavailableduringtheinstallation:McAfeeProductLicenseKey(notrequiredtoinstallanevaluationversionofthesoftware).
MicrosoftSQLauthenticationrequiresoneofthesecredentials:Windowsauthenticationcredentials—CredentialsforadomainadministratoruseraccountSQLauthenticationcredentials—FormoreinformationaboutrequiredSQLServerpermissions,seeAbouttheSQLServerrolesrequiredforinstallation.
DecideifyouwantInitialProductDeploymenttorunautomaticallyafterinstallation.
MostuserswillprobablychoosetoconfiguretheirePolicyOrchestratorserverautomatically.
But,manualconfigurationmightbebetterforuserswith,forexampletheserestrictions:NoInternetaccessDirectdownloadrestrictionstocriticalinfrastructurePhaseddeploymentprocessesthatrequireproductsbereleasedincrementallyintocriticalenvironmentsLargeorganizationswithspecificrequirementswithintheirenvironmentSeeAutomaticProductConfigurationfordetails.
AdestinationfolderforePolicyOrchestratorsoftwareinstallation(requiredforCustomandClusterinstallations).
AsupportedSQLServer.
Ifyou'reusinganewSQLServerinstalledmanually,oranexistingSQLServeryouneedtoprovidethesedetailsduringtheinstallationprocess(dependingonyourconfiguration),ontheDatabaseInformationpage:ThenameofyourSQLServer.
ThisnameshouldbeformattedusingtheSQLServernameortheSQLServernamewithinstancename.
ThedynamicportnumberusedbyyourSQLServer.
IfyouarerestoringyourePolicyOrchestratorserveryoumust:HavepreviouslyrestoredtheSQLserverdatabaseusingoneoftheMicrosoftSQLrestoreprocesses.
SeetheMcAfeeePolicyOrchestratorSoftwareProductGuidefordetails.
KnowtheKeystoreencryptionpassphraseusedwithyourDisasterRecoverySnapshotrecords.
ThispassphraseisusedtodecrypttheePolicyOrchestratorsensitiveinformationstoredintheSQLSnapshotrecords.
AbouttheSQLServerinstallationdocumentedinthisguideePolicyOrchestratorsoftwarerequirestheuseofasupportedSQLServer.
TheonlyinstallationscenariodescribedindetailinthisguideisafirsttimeinstallationofSQLServer2008Express.
Inthisscenario,theInstallShieldwizardinstallsboththeePolicyOrchestratorsoftwareandtheSQLServersoftwareonthesamesystem.
IfyouwanttoinstalltheSQLServeronadifferentserverfromtheMcAfeeePOserver,installitmanually.
FormoreinformationoninstallingadifferentsupportedSQLServer,seetheSQLServersoftwaredocumentation.
ClusterinstallationrequiresyoutouseamanuallyinstalledaSQLServeronasystemotherthanwhereyouinstallyourePolicyOrchestratorsoftware.
1InstallationrequirementsandrecommendationsThingstoknowbeforeinstallation12McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideOtherrelevantSQLServerinstallationsandupgradesSeetheMicrosoftdocumentationprovidedforinformationabouttheseinstallationscenarios:InstallingSQLServer2008or2012UpgradingfromSQLServer2005toSQLServer2008or2012UpgradingfromSQLServer2005Expressto2008Expressor2012ExpressAbouttheSQLServerrolesrequiredforinstallationIfyouplantouseanexistingSQLServerwithyourePolicyOrchestratorsoftware,specificSQLServerrolesarerequiredtoinstallsuccessfully.
IfyouselecttouseanexistingSQLServer,ormanuallyinstallanewSQLServer,providecredentialsduringtheePolicyOrchestratorinstallationprocess.
Theseuseraccountcredentials,foreitherWindowsorSQLauthentication,musthavebeengrantedtheserverroleofdbcreatoronthetargetSQLServer.
ThisserverroleisrequiredfortheSetupprogramtocreateandaddtherequisitecoreePolicyOrchestratordatabaseobjectstothetargetSQLServerduringinstallation.
Bydefault,oncethecoredatabaseiscreated,thisuseraccountisgrantedthedatabaseroleofdb_ownerfortheePolicyOrchestratordatabase.
Afterinstallationiscomplete,thedbcreatorserverrolecanberevokedfromthisuseraccount.
Revokingthedbcreatorserverrolerestrictstheuseraccounttoonlythosepermissionsgrantedthedb_ownerdatabaseroleonthecoredatabase.
FormoreinformationaboutthespecificstandardSQLdatabaserolesrequiredforyourePolicyOrchestratorservertooperateonceinstalled,seetheproductguideorHelp.
ForacompletediscussionofSQLServerrolesandpermissions,seetheproductdocumentationforthesupportedSQLServeryouareusing.
AboutHTTPportoptionsTheportsusedbyePolicyOrchestratorsoftwarearepredefined,andpopulatedbydefault.
Mostportdesignationscanbechangedonlyduringtheinstallationprocess.
Reviewthistablefordetailsaboutwhichportassignmentsyoucanmodify.
PortDefaultvalueCanbechangedduringinstallationCanbechangedafterinstallationAgentservercommunicationport80XAgentservercommunicationsecureport443XAgentwakeupcommunicationport8081XXAgentbroadcastcommunicationport8082XXConsoletoapplicationservercommunicationport8443XClienttoserverauthenticatedcommunicationport8444XSecuritythreatscommunicationport8801SQLServerTCPport1433XInstallationrequirementsandrecommendationsThingstoknowbeforeinstallation1McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide13AutomaticproductconfigurationDuringanautomaticconfiguration,yourMcAfeeePOserverdownloadsandinstallsalltheMcAfeeproductsentitledtoyoubyyoursitelicense.
Inmostcases,duringanautomaticconfiguration,youneverseetheAutomaticProductConfigurationprocessrun.
ItstartsrunningassoonasyoucompleteinstallingtheePolicyOrchestratorsoftwareandisusuallyfinishedbeforeyoulogon.
IftheAutomaticProductConfigurationpageappearswhenyouinitiallylogontoePolicyOrchestrator,anerroroccurredwhiledownloadingorinstallingyourproducts.
ForexampleifyourInternetconnectionisinterrupted.
MakeanoteoftheproductthatfailedtoinstallandclickRetrytoattempttheproductinstallationagain.
Ifyouwanttostoptheautomaticproductinstallation,clickStop.
AconfirmationdialogboxasksyoutoconfirmthatyouwanttouseSoftwareManagertoinstallyourproducts.
OnceyouclickOKintheStopAutomaticProductSetupconfirmationdialogbox,youmustusetheSoftwareManagertoinstallyourproducts.
AutomaticProductConfigurationisavailableonlyonceduringyourinitialconfiguration.
IfaproductcontinuestofailduringAutomaticProductConfiguration,contactMcAfeeTechnicalSupport.
Or,clickOKtoexittheAutomaticProductConfigurationpageandbeginsettinguptheMcAfeeePOserver.
Forfutureproductinstallationstatusinformation,opentheSoftwareManager:Menu|Software|SoftwareManager.
DistributedrepositoryrequirementsDistributedrepositoriesareusedthroughoutyourenvironmenttoprovideaccesstoimportantcontentusedbyyourePolicyOrchestratorserver.
Yourdistributedrepositoriesmustconformtotheseminimumrequirements.
ComponentRequirementsFreediskspace400MBminimum(800MBrecommended)onthedrivewheretherepositoryisstored.
Therequiredspacedependsontheamountofdatabeingserved.
ThediskspacerequirementforthedistributedrepositoriesonsystemswhereagentsaredesignatedasSuperAgentsisequaltothediskspaceavailableforthemasterrepository.
Memory256MBminimum.
RepositoryhostsHTTPcompliantserversonMicrosoftWindows,orLinuxoperatingsystems.
Windows,Linux,orOpenEnterpriseFTPservers.
Windows,Linux,orUNIXSambaUNCshares.
SystemswhereaSuperAgentisinstalled.
1InstallationrequirementsandrecommendationsAutomaticproductconfiguration14McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideSupportedproductsandknownissuesReviewtheproductsePolicyOrchestratorsupportsandknownissuesbeforecompletingyourinstallationorupgrade.
Toviewanupdatedlistofsupportedproductsandknownissues,seeoneoftheseKnowledgeBasearticles:McAfeeePO5.
0SupportedProducts—KB76736(https://kc.
mcafee.
com/corporate/indexpage=content&id=KB76736)McAfeeePO5.
0installation/patchupgradechecklistforknownissues—KB76739(https://kc.
mcafee.
com/corporate/indexpage=content&id=KB76739)InstallationrequirementsandrecommendationsSupportedproductsandknownissues1McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide151InstallationrequirementsandrecommendationsSupportedproductsandknownissues16McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide2InstallingMcAfeeePolicyOrchestratorYoucaninstalltheePolicyOrchestratorsoftwareeitherasafirsttimeinitialinstallationorasarecoveryinstallationwhereyourMicrosoftSQLServeralreadyincludesanePolicyOrchestratorconfigurationfromapreviousinstallation.
SeeRestoringMcAfeeePolicyOrchestratorifthisisarecoveryinstallationwhereyourMicrosoftSQLServeralreadyincludesanePolicyOrchestratorconfigurationfromapreviousinstallation.
ContentsInitialinstallationoptionsPerformExpressinstallationPerformCustominstallationPerformclusterinstallationInstallremoteAgentHandlersCompleteafirst-timeinstallationInitialinstallationoptionsTherearethreeinitialinstallationoptionsforePolicyOrchestratorsoftware.
EachoptionwalksyouthroughtheinstallationprocessusingtheePolicyOrchestratorInstallShieldwizard.
Usethistabletodeterminewhichinitialinstallationoptionisrightforyourenvironment.
2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide17InstallationoptionDetailsExpressThemostdirectinstallationpath.
UsethisoptionifyouwanttoaccepttheMcAfeedefaultinstallationsettings.
CustomCustomizeyourinstallation.
Usethisoptionwhenyouwanttospecifythedetailsofyoursoftwareinstallation,including:Thedestinationfolderwherethesoftwareisinstalled(C:\ProgramFiles\McAfee\ePolicyOrchestrator\bydefault).
Theportsused.
InstallingSQLServer2008Expressisoptional.
YoucanalsospecifyadifferentsupportedSQLServer,iftheSQLServerisinstalledbeforeyoubegintheMcAfeeePOsoftwareinstallation.
ClusterPerformaclusterinstallation.
Usethisoptionwhenyouwanttoinstallintoaclusterenvironment.
Beforeyoubegininstallingthesoftware:YourMicrosoftClusterServer(MSCS)environmentmustbesetup.
YoumusthaveasupportedSQLServerinstalledinalocationaccessibletoyourcluster.
IfyouareupgradingfromapriorversionofMcAfeeePolicyOrchestratorsoftwareoraremigratingfromanevaluationversion,seeUpgradingMcAfeeePolicyOrchestratorsoftware.
PerformExpressinstallationTheExpressinstallationinstallsyourePolicyOrchestratorsoftwareinthefewestpossiblestepsbyautomaticallyacceptingthedefaultconfiguration.
BeforeyoubeginTheePolicyOrchestratorExpressinstallationisseparatedintotwotasks.
Task1IntheChooseDatabaseOptionstep,selectMicrosoftSQLExpress,thenclickNext.
IfyouusetheMicrosoftSQLServerExpressdatabasewithePolicyOrchestrator,DisasterRecoveryisautomaticallydisabled.
McAfeedoesnotrecommendenablingDisasterRecoverywiththisdatabasebecauseofdatabasememorylimitations.
2IntheInstalladditionalsoftwarestep,anyremainingprerequisitesarelisted.
Toinstallthem,clickNext.
Microsoft.
NETFramework2.
0(orlater)isrequiredsoftwarewheninstallingSQLExpress;itisnotinstalledautomatically.
Ifthissoftwareismissing,exittheSetupandacquireandinstallitmanuallybeforeproceeding.
3IntheDatabaseInformationstep,specifyyourWindowsauthenticationcredentials,thenclickNext.
4Ifanyofthedefaultportassignmentsareinconflict,resolvethembyprovidingalternativeportsintheHTTPPortInformationstep.
Ifnoconflictsexist,youcannotmodifydefaultportassignments.
SelecttheCustominstallationoptionifyouneedtomodifyportassignments2InstallingMcAfeeePolicyOrchestratorPerformExpressinstallation18McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide5IntheAdministratorInformationstep,typethisinformation,thenclickNext.
aTypetheUsernameandPasswordyouwanttouseforyourprimaryadministratoraccount.
bDependingontheinstallation,typetheKeystoreencryptionpassword.
Ifthisisa:Normalorinitialinstallation—TypeapasswordusedtoencryptDisasterRecoverySnapshotrecords.
Keeparecordofthispassword.
IfyoueverneedtorestoreyourePolicyOrchestratordatabase,youneedthispasswordtodecrypttheDisasterRecoverySnapshotrecords.
Restoreinstallation—TypethepasswordtodecrypttheDisasterRecoverySnapshotrecords.
SeeProductGuidefordetails.
6IntheTypeLicenseKeystep,typeyourlicensekey,thenclickNext.
Ifyoudon'thavealicensekey,youcanselectEvaluationtocontinueinstallingthesoftware.
Theevaluationperiodislimitedto90days.
Youcanprovidealicensekeyafterinstallationiscompletefromwithintheapplication.
Formoreinformation,seetheproductguideorHelp.
7AccepttheMcAfeeEndUserLicenseAgreementandclickOK.
8FromtheReadytoinstalltheProgramdialogbox,decideifyouwanttoSendanonymoususageinformationtoMcAfee,thenclickInstalltobegininstallingthesoftware.
Deselectthecheckboxifyoudon'twantMcAfeetocollectanonymousdiagnosticandusagedata.
9Whentheinstallationiscomplete,clickFinishtoexittheInstallShieldwizard.
YourePolicyOrchestratorsoftwareisnowinstalled.
DoubleclickonyourdesktoptostartusingyourMcAfeeePOserver,orbrowsetotheserverfromaremotewebconsole(https://:).
TasksSetupExpressinstallationonpage19WhenyousetuptheePolicyOrchestratorExpressinstallationyoudownloadthesoftware,choosetheinstallationtype,andstarttheinstallation.
CompleteExpressinstallationonpage20CompletingtheePolicyOrchestratorExpressinstallationallowsyoutoselectandconfigurethedatabase,thecommunicationports,andthelicense.
SetupExpressinstallationWhenyousetuptheePolicyOrchestratorExpressinstallationyoudownloadthesoftware,choosetheinstallationtype,andstarttheinstallation.
BeforeyoubeginMakesurethatyouhaveread,understood,andcompliedwiththeinformationinInstallationrequirementsandrecommendations.
UpdatethesystemthathostsyourePolicyOrchestratorserverwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
Werecommendthatyoumonitortheentireinstallationprocess.
Youmightneedtorestartyoursystem.
InstallingMcAfeeePolicyOrchestratorPerformExpressinstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide19Task1Usinganaccountwithlocaladministratorpermissions,logontotheWindowsservercomputertobeusedastheePolicyOrchestratorserver.
2FromsoftwaredownloadedfromtheMcAfeewebsite:extractfilestoatemporarylocationanddoubleclickSetup.
exe.
TheexecutableislocatedinthedownloadedePolicyOrchestratorinstallationfile.
DonotattempttorunSetup.
exewithoutfirstextractingthecontentsofthe.
zipfile.
TheMcAfeeePolicyOrchestratorInstallShieldWizardislaunched.
3Clickoneoftheseoptions:NexttocontinuewithanormalePolicyOrchestratorinstallation.
RestoreePOfromanexistingdatabaseSnapshotandNexttocontinuewithanePolicyOrchestratorrestoreinstallation.
TheePolicyOrchestratorDisasterRecoverySnapshotfeaturehelpsyouquicklyrecoverifthehardwarehostingyourMcAfeeePOserverfails.
ItsavesyourePolicyOrchestratorconfiguration,extensions,keys,andmoretoSnapshotrecordsintheePolicyOrchestratordatabase.
Ifthisisarestoreinstallation,someoftheinitialinstallationdatabaseselectiondialogboxesdonotappearduringtheinstallation.
4IntheSetupTypestep,selectExpress,thenclickNext.
TheePolicyOrchestratorExpressinstallationissetupandstarted.
Nowconfigurethedatabase,communicationports,andlicensetocompletetheExpressinstallation.
CompleteExpressinstallationCompletingtheePolicyOrchestratorExpressinstallationallowsyoutoselectandconfigurethedatabase,thecommunicationports,andthelicense.
BeforeyoubeginYoumusthavesetuptheePolicyOrchestratorExpressinstallationbeforeyoucancompletetheExpressinstallationdescribedinthistask.
MonitortheentireinstallationprocesswhenusingtheCustominstallationprocess.
Youmightneedtorestartyoursystem.
Task1AfteryouhavecompletedthestepsinSetupExpressinstallation,intheChooseDatabaseOptionstep,selectMicrosoftSQLExpress,thenclickNext.
IfyouusetheMicrosoftSQLServerExpressdatabasewithePolicyOrchestrator,DisasterRecoveryisautomaticallydisabled.
McAfeedoesnotrecommendenablingDisasterRecoverywiththisdatabasebecauseofdatabasememorylimitations.
2IntheInstalladditionalsoftwarestep,anyremainingprerequisitesarelisted.
Toinstallthem,clickNext.
Microsoft.
NETFramework2.
0(orlater)isrequiredsoftwarewheninstallingSQLExpress;itisnotinstalledautomatically.
Ifthissoftwareismissing,exittheSetupandacquireandinstallitmanuallybeforeproceeding.
3IntheDatabaseInformationstep,specifyyourWindowsauthenticationcredentials,thenclickNext.
2InstallingMcAfeeePolicyOrchestratorPerformExpressinstallation20McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide4Ifanyofthedefaultportassignmentsareinconflict,resolvethembyprovidingalternativeportsintheHTTPPortInformationstep.
Ifnoconflictsexist,youcannotmodifydefaultportassignments.
SelecttheCustominstallationoptionifyouneedtomodifyportassignments5IntheAdministratorInformationstep,typethisinformation,thenclickNext.
aTypetheUsernameandPasswordyouwanttouseforyourprimaryadministratoraccount.
bDependingontheinstallation,typetheKeystoreencryptionpassword.
Ifthisisa:Normalorinitialinstallation—TypeapasswordusedtoencryptDisasterRecoverySnapshotrecords.
Keeparecordofthispassword.
IfyoueverneedtorestoreyourePolicyOrchestratordatabase,youneedthispasswordtodecrypttheDisasterRecoverySnapshotrecords.
Restoreinstallation—TypethepasswordtodecrypttheDisasterRecoverySnapshotrecords.
SeeProductGuidefordetails.
6IntheTypeLicenseKeystep,typeyourlicensekey,thenclickNext.
Ifyoudon'thavealicensekey,youcanselectEvaluationtocontinueinstallingthesoftware.
Theevaluationperiodislimitedto90days.
Youcanprovidealicensekeyafterinstallationiscompletefromwithintheapplication.
Formoreinformation,seetheproductguideorHelp.
7AccepttheMcAfeeEndUserLicenseAgreementandclickOK.
8FromtheReadytoinstalltheProgramdialogbox,decideifyouwanttoSendanonymoususageinformationtoMcAfee,thenclickInstalltobegininstallingthesoftware.
Deselectthecheckboxifyoudon'twantMcAfeetocollectanonymousdiagnosticandusagedata.
9Whentheinstallationiscomplete,clickFinishtoexittheInstallShieldwizard.
YourePolicyOrchestratorsoftwareisnowinstalled.
DoubleclickonyourdesktoptostartusingyourMcAfeeePOserver,orbrowsetotheserverfromaremotewebconsole(https://:).
PerformCustominstallationDuringCustominstallation,youcanmodifytheinstallationprocessateachstep.
Youcanspecifydestinationfoldersandportsusingthisoption.
TheePolicyOrchestratorCustominstallationisseparatedintotwotasks.
TasksSetupCustominstallationonpage22WhenyousetuptheePolicyOrchestratorCustominstallationyoudownloadthesoftware,choosetheinstallationtype,andstarttheinstallation.
CompleteCustominstallationonpage23CompletingtheePolicyOrchestratorCustominstallationallowsyoutoselectandconfigurethedatabase,thecommunicationports,andthelicense.
InstallingMcAfeeePolicyOrchestratorPerformCustominstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide21SetupCustominstallationWhenyousetuptheePolicyOrchestratorCustominstallationyoudownloadthesoftware,choosetheinstallationtype,andstarttheinstallation.
BeforeyoubeginMakesurethatyouhaveread,understood,andcompliedwiththeinformationinInstallationrequirementsandrecommendations.
IfyouselecttouseanexistingSQLServer,ormanuallyinstallanewSQLServer,gatherthisinformationandcompletethesestepsbeforebeginningyourinstallationtomakesurethatyourePolicyOrchestratorsoftwarecancommunicatewiththedatabaseserver:1VerifythattheSQLBrowserServiceisrunning.
2MakesurethattheTCP/IPProtocolisenabledintheSQLServerConfigurationManager.
3UpdateboththesystemthathostsyourMcAfeeePOserverandyourSQLServerwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
4DecideifyouwanttorunAutomaticProductConfigurationafterinstallation.
SeeAutomaticProductConfigurationfordetails.
MonitortheentireinstallationprocesswhenusingtheCustominstallationprocess.
Youmightneedtorestartyoursystem.
Task1Usinganaccountwithlocaladministratorpermissions,logontotheWindowsservercomputertobeusedastheMcAfeeePOserver.
2DownloadtheePolicyOrchestratorsoftwarefromtheMcAfeewebsite,extractfilestoatemporarylocation,andfindtheSetup.
exefile.
TheexecutableislocatedinthedownloadedePolicyOrchestratorinstallationfile.
DonotattempttorunSetup.
exewithoutfirstextractingthecontentsofthe.
zipfile.
3RuntheSetup.
exeusingthemethodtorun,orstop,AutomaticProductConfiguration:TorunAutomaticProductConfiguration—DoubleclickSetup.
exethefileandAutomaticProductConfigurationrunsaftertheinstallationiscomplete.
TostopAutomaticProductConfiguration—TypeSetup.
exewiththeparameterSKIPAUTOPRODINST=1.
ThisparameterstopsAutomaticProductConfigurationfromrunning.
Forexample:Setup.
exeSKIPAUTOPRODINST=1TheMcAfeeePolicyOrchestratorInstallShieldWizardislaunched.
2InstallingMcAfeeePolicyOrchestratorPerformCustominstallation22McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide4Clickoneoftheseoptions:NexttocontinuewithanormalePolicyOrchestratorinstallation.
RestoreePOfromanexistingdatabaseSnapshotandNexttocontinuewithanePolicyOrchestratorrestoreinstallation.
TheePolicyOrchestratorDisasterRecoverySnapshotfeaturehelpsyouquicklyrecoverifthehardwarehostingyourMcAfeeePOserverfails.
ItsavesyourePolicyOrchestratorconfiguration,extensions,keys,andmoretoSnapshotrecordsintheePolicyOrchestratordatabase.
Ifthisisarestoreinstallation,someoftheinitialinstallationdatabaseselectiondialogboxesdonotappearduringtheinstallation.
5IntheSetupTypestep,selectCustom,thenclickNext.
TheePolicyOrchestratorcustominstallationissetupandstarted.
Nowconfigurethedatabase,communicationports,andlicensetocompletetheCustominstallation.
CompleteCustominstallationCompletingtheePolicyOrchestratorCustominstallationallowsyoutoselectandconfigurethedatabase,thecommunicationports,andthelicense.
BeforeyoubeginYoumusthavesetuptheePolicyOrchestratorCustominstallationbeforeyoucancompletethecustominstallationdescribedinthistask.
MonitortheentireinstallationprocesswhenusingtheCustominstallationprocess.
Youmightneedtorestartyoursystem.
Task1AfteryouhavecompletedthestepsinSetupCustominstallation,intheChooseDatabaseOptionstep,selectoneoftheseandclickNext:MicrosoftSQLExpress—AutomaticallyinstallsSQLServer2008ExpresstothedefaultlocationdefinedbyMicrosoft(C:\ProgramFiles\MicrosoftSQLServer).
IfyouusetheMicrosoftSQLServerExpressdatabasewithePolicyOrchestrator,DisasterRecoveryisautomaticallydisabled.
WedonotrecommendenablingDisasterRecoverywiththisdatabasebecauseofdatabasememorylimitations.
MicrosoftSQLServer—TospecifyapreviouslyinstalledSQLdatabaseserver.
ePolicyOrchestratorDisasterRecoveryisautomaticallyenabledwhenyouspecifyapreviouslyinstalledMicrosoftSQLdatabaseserver.
SeeePolicyOrchestratorSoftwareProductGuideformoreinformation.
YoucannotinstallSQLServer2008Expresslocallyiftheserversystemyouareinstallingonmeetsanyoftheseconditions:16ormorenamedinstancesexistonthelocallyinstalledSQLServerAnyversionofthelocallyinstalledSQLServercontainsaninstancewiththenameEPOSERVERSQLServer2008ExpressisalreadyinstalledlocallyInstallingMcAfeeePolicyOrchestratorPerformCustominstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide232IntheInstalladditionalsoftwarestep,anyremainingprerequisitesarelisted.
Toinstallthem,clickNext.
Microsoft.
NETFramework2.
0(orlater)isrequiredsoftwarewheninstallingSQLExpress;itisnotinstalledautomatically.
Ifthissoftwareismissing,exittheSetupandacquireandinstallitmanuallybeforeproceeding.
3IntheDestinationFolderstep,click:Next—InstallyourMcAfeeePOsoftwareinthedefaultlocation(C:\ProgramFiles\McAfee\ePolicyOrchestrator\).
Change—SpecifyacustomdestinationlocationforyourMcAfeeePOsoftware.
WhentheChangeCurrentDestinationFolderwindowopens,browsetothedestinationandcreatefoldersifneeded.
Whenfinished,clickOK.
4IntheDatabaseInformationstep:IfyouselectedMicrosoftSQLExpress,specifyyourWindowsauthenticationcredentialsthenclickNext.
IfyouselectedMicrosoftSQLServerusethistable:1.
SelecttheserverfromtheDatabaseServermenu.
2.
SpecifywhichtypeofDatabaseServerCredentialstouse,thenclickNext.
a.
SelecttheserverfromtheDatabaseServermenu.
b.
SpecifywhichtypeofDatabaseServerCredentialstouse,thenclickNext:Windowsauthentication1FromtheDomainmenu,selectthedomainoftheuseraccountyou'regoingtousetoaccesstheSQLServer.
2TypetheUsernameandPassword.
IfyouareusingapreviouslyinstalledSQLServer,makesurethatyouruseraccounthasaccess.
SQLauthenticationTypetheUsernameandPasswordforyourSQLServer.
MakesurethatcredentialsyouproviderepresentanexistinguserontheSQLServerwithappropriaterights.
TheDomainmenuisgrayedoutwhenusingSQLauthentication.
YoumightneedtotypetheSQLserverTCPporttouseforcommunicationbetweenyourMcAfeeePOserveranddatabaseserver(defaultportsforthiscommunicationare1433or1434).
5IntheHTTPPortInformationstep,reviewthedefaultportassignments.
ClickNexttoverifythattheportsarenotalreadyinuseonthissystem.
Youcanmodifysomeoftheseportsnow.
Whenyourinstallationiscomplete,youcanchangeonlytheAgentwakeupcommunicationportandAgentbroadcastcommunicationport.
Ifyouneedtochangeyourotherportsettingslater,reinstallyourMcAfeeePOsoftware.
Formoreinformationaboutchangingportvalues,seeAboutHTTPportoptions.
2InstallingMcAfeeePolicyOrchestratorPerformCustominstallation24McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide6IntheGlobalAdministratorInformationstep,typethisinformationthenclickNext.
aTypetheUsernameandPasswordyouwanttouseforyourprimaryGlobalAdministratoraccount.
bDependingontheinstallation,typetheKeystoreencryptionpassword.
Ifthisisa:Normalorinitialinstallation—TypeapasswordusedtoencryptDisasterRecoverySnapshotrecords.
Keeparecordofthispassword.
IfyoueverneedtorestoreyourePolicyOrchestratordatabase,youneedthispasswordtodecrypttheDisasterRecoverySnapshotrecords.
Restoreinstallation—TypethepasswordtodecrypttheDisasterRecoverySnapshotrecords.
SeeProductGuidefordetails.
7IntheTypeLicenseKeystep,typeyourlicensekey,thenclickNext.
Ifyoudon'thavealicensekey,youcanselectEvaluationtocontinueinstallingthesoftware.
Theevaluationperiodislimitedto90days.
Youcanprovidealicensekeyafterinstallationiscompletefromwithintheapplication.
Formoreinformation,seetheProductGuideorHelp.
8AccepttheMcAfeeEndUserLicenseAgreementandclickOK.
9FromtheReadytoinstalltheProgramdialogbox,decideifyouwanttoSendanonymoususageinformationtoMcAfee,thenclickInstalltobegininstallingthesoftware.
Deselectthecheckboxifyoudon'twantMcAfeetocollectanonymousdiagnosticandusagedata.
10Whentheinstallationiscomplete,clickFinishtoexittheInstallShieldWizard.
YourePolicyOrchestratorsoftwareisnowinstalled.
DoubleclickonyourdesktoptostartusingyourMcAfeeePOserver,orbrowsetotheserverfromaremotewebconsole(https://:)PerformclusterinstallationTheePolicyOrchestratorsoftwareprovidesHighAvailabilityforserverclusterswithMicrosoftClusterServer(MSCS)software.
InstallingthesoftwareintoyourMicrosoftClusterServerenvironmentrequiresyoutotakemorestepsbeyondthestepsneededtocompletetheExpressandCustominstallations.
Theinstallationprocessdependsontheoperatingsystemyouareinstallingon.
ClusterinstallationissupportedonWindowsServer2008or2012.
SuccessfulinstallationdependsonpropersetupoftheMicrosoftClusterServersoftware(MSCS).
FormoreinformationonMSCSsetup,seetheMicrosoftdocumentation.
Cluster.
exeisadeprecatedcommandonWindowsServer2012.
InstalltheFailoverClusterCommandInterfaceasanadditionalfeatureduringclustersetuponWindowsServer2012.
ClusterinstallationterminologyThisterminologyisusedintheclusterinstallationinstructions.
InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide25Table2-1ClusterinstallationterminologyTermDefinitionDatadriveOneofthetwodrivesrequiredbyMicrosoftClusterServerandePolicyOrchestratorsoftware.
Thedatadriveisaremotedrivethatisaccessibletoallnodesinthecluster,andisthelocationwhereyouinstalltheePolicyOrchestratorfiles.
ePOVirtualIPaddressresourceTheIPaddressresourcethatyoucreateaspartoftheePolicyOrchestratorclusterinstallation.
ThisvirtualIPaddressrepresentstheMcAfeeePOclusterinstallationasawhole.
ReferencestothisIPaddresspointtothecurrentlyactivenodeinyourcluster.
ePOVirtualNetworkNameresourceTheNetworkNameresourcethatyoucreateaspartoftheePolicyOrchestratorclusterinstallation.
ThisvirtualNetworkNamerepresentstheMcAfeeePOclusterinstallationasawhole.
ReferencestothisNetworkNamepointtothecurrentlyactivenodeinyourcluster.
QuorumdriveOneofthetwodrivesrequiredbyMicrosoftClusterServersoftware.
ThequorumdriveiswheretheMSCSfilesareinstalled.
Don'tinstallanyoftheePolicyOrchestratorfilesonthisdrive.
ClusterinstallationprerequisitesBeforeyoubeginyourclusterinstallation,reviewthislistofrequirementsandprerequisites,andmakesurethateachisinplaceortheinformationisavailable.
TheserequirementsapplytoinstallationsonbothWindowsServer2008and20012.
MicrosoftClusterServerissetupandrunningonaclusteroftwoormoreservers.
AquorumdriveispresentandconfiguredaccordingtoMicrosoftguidelines.
Adatadriveispresentandavailabletoallnodesinthecluster.
AsupportedremoteSQLServerisconfigured.
ToconfirmthattheePolicyOrchestratorsoftwarecancommunicatewiththisserverduringinstallation:VerifythattheSQLBrowserServiceisrunning.
MakesurethattheTCP/IPProtocolisenabledintheSQLServerConfigurationManager.
Youmightneedtoprovidethesedetailsduringtheinstallationprocess(dependingonyourconfiguration),ontheDatabaseInformationpage:ThenameofyourSQLServer.
Dependingontheconfiguration,formatthisnameusingtheSQLServernameortheSQLServernamewithinstancename.
Thedynamicportnumber,ifany,usedbyyourSQLServer.
Specifythedynamicportnumberduringtheinstallationprocess,ontheDatabaseInformationpage.
InstallonWindowsServer2008InstallingePolicyOrchestratorsoftwareinaclusterenvironmentthatincludesWindowsServer2008systemsrequiresthatyoucompleteeachofthesetasksintheorderlisted.
BeforeyoubeginUpdatethesystemsthathostyourePolicyOrchestratorserverandyourSQLServerwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
2InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation26McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideTasksCreatetheePolicyOrchestratorapplicationgrouponpage27TheePolicyOrchestratorapplicationgroupisrequiredtoseparatetheePolicyOrchestratorapplicationfromtheMicrosoftClusterServicesinyourclusterenvironment.
CreatetheClientAccessPointonpage27TheClientAccessPointdefinestheePolicyOrchestratorVirtualIPaddressandVirtualNetworknamessoyourclusternodescancommunicatewithyourMcAfeeePOserver.
Addthedatadriveonpage28ThedatadriveisthelocationwhereyouinstalltheePolicyOrchestratorsoftware.
Usearemotedrivethatallnodesinyourclustercanaccess.
InstallePolicyOrchestratorsoftwareoneachnodeonpage28RuntheClusterinstallationoneachofthenodes.
Tomakesurethateachnodehasexclusiveaccesstothequorumanddatadrivesduringinstallation,shutdownallothernodesinthecluster.
CreatetheGenericServiceresourcesonpage28TheGenericServiceresourcesenabletheclusterservertocontroltheePolicyOrchestratorserver,bystartingandstoppingtheePolicyOrchestratorservices.
CreatetheePolicyOrchestratorapplicationgroupTheePolicyOrchestratorapplicationgroupisrequiredtoseparatetheePolicyOrchestratorapplicationfromtheMicrosoftClusterServicesinyourclusterenvironment.
Task1OpentheFailoverClusterManagementtoolontheactivenodebyclickingStart|Programs|AdministrativeTools|FailoverClusterManagement.
2RightclickServicesandApplicationsintheclustermanagementtree,thenselectMoreActions|CreateEmptyServiceorApplication.
3RightclickNewserviceorapplicationandRenametheApplicationGrouptoePO.
CreatetheClientAccessPointTheClientAccessPointdefinestheePolicyOrchestratorVirtualIPaddressandVirtualNetworknamessoyourclusternodescancommunicatewithyourMcAfeeePOserver.
Task1RightclicktheePOgroupandselectAddaresource|ClientAccessPoint.
TheClientAccessPointWizardappears.
2TypetheePolicyOrchestratorVirtualNameintheNamefieldandspecifytheePolicyOrchestratorVirtualIPaddressintheAddressfieldthenclickNext.
TheConfirmationpageappears.
3ClickNexttoallowtheClientAccessPointtobeconfigured,thenclickFinishwhenthewizardiscomplete.
4IftheClientAccessPointisoffline,rightclickthenameandselectBringthisresourceonline.
InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide27AddthedatadriveThedatadriveisthelocationwhereyouinstalltheePolicyOrchestratorsoftware.
Usearemotedrivethatallnodesinyourclustercanaccess.
Task1RightclicktheePOApplicationGroupandselectAddStorage.
2IntheAddStoragedialogbox,selectthedatadrivetobeusedforyourePolicyOrchestratorinstallationthenclickOK.
InstallePolicyOrchestratorsoftwareoneachnodeRuntheClusterinstallationoneachofthenodes.
Tomakesurethateachnodehasexclusiveaccesstothequorumanddatadrivesduringinstallation,shutdownallothernodesinthecluster.
Task1DoubleclickSetup.
exeintheinstallationfolder.
2FollowthewizarduntilyoureachtheSetupTypepage,thenselecttheClusteroption,thenclickNext.
3IntheChooseDestinationLocationpage,specifythepathfortheshareddatadrive,thenclickNext.
Usethissamepathforeachnode.
4IntheSetVirtualServerSettingspage(onthefirstnodeonly),providethisidentifyinginformationfortheMcAfeeePOcluster:TheePolicyOrchestratorVirtualServerIPaddressTheePolicyOrchestratorVirtualClusternameTheePolicyOrchestratorVirtualClusterFQDNThisinformationisautomaticallyprovidedonsubsequentnodes.
5CompletetheinstallationonthefirstnodeasdescribedinPerformingCustominstallation.
6Repeatthistaskforeachnodeinyourcluster.
CreatetheGenericServiceresourcesTheGenericServiceresourcesenabletheclusterservertocontroltheePolicyOrchestratorserver,bystartingandstoppingtheePolicyOrchestratorservices.
AddthreeGenericServiceresourcesforusewithyourclusteredePolicyOrchestratorserver.
Usethistableandtasktoconfigureeachresource.
Createtheresourcesintheordertheyarelistedinthetable.
2InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation28McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideResourceProperties:GeneraltabProperties:DependenciestabePolicyOrchestrator5.
1.
0ApplicationServerNochangesnecessaryDatadriveePolicyOrchestrator5.
1.
0ServerRemovetheStartupparametersandaddablankspace.
Apachewillnotstartwithanystartupparametersspecified,andanemptyentryisnotpermitted.
Therefore,ablankspaceisrequired.
ePolicyOrchestrator5.
1.
0ApplicationServerePolicyOrchestratorEventParser5.
1.
0NochangesnecessaryePolicyOrchestrator5.
1.
0ApplicationServerTask1IntheClusterAdministrator,rightclicktheePOApplicationGroupandselectAddaresource|GenericService.
2OntheSelectServiceWizard,selectaresourcethenclickNext.
3IntheConfirmationpage,clickNexttoallowtheservicetobecreated.
Whenthewizardiscomplete,clickFinish.
4Rightclicktheresourceyou'vecreatedandselectProperties.
InthePropertiesdialogbox,setthepropertiesspecifiedintheGenericServiceresourceconfigurationstable.
5Repeatthistaskforeachgenericserviceresource.
InstallonWindowsServer2012InstallingePolicyOrchestratorsoftwareinaclusterenvironmentthatincludesWindowsServer2012systemsrequiresthatyoucompleteeachofthesetasksintheorderlisted.
BeforeyoubeginUpdatethesystemsthathostyourePolicyOrchestratorserverandyourSQLServerwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
TasksCreatetheePolicyOrchestratorapplicationroleonpage30TheePolicyOrchestratorapplicationroleisrequiredtoseparatetheePolicyOrchestratorapplicationfromtheMicrosoftClusterServicesinyourclusterenvironment.
CreatetheClientAccessPointonpage30TheClientAccessPointdefinestheePolicyOrchestratorVirtualIPaddressandVirtualNetworknamessoyourclusternodescancommunicatewithyourMcAfeeePOserver.
Addthedatadriveonpage30ThedatadriveisthelocationwhereyouinstalltheePolicyOrchestratorsoftware.
Usearemotedrivethatallnodesinyourclustercanaccess.
InstallePolicyOrchestratorsoftwareoneachnodeonpage30RuntheClusterinstallationoneachofthenodes.
Tomakesurethateachnodehasexclusiveaccesstothequorumanddatadrivesduringinstallation,shutdownallothernodesinthecluster.
CreatetheGenericServiceresourcesonpage31TheGenericServiceresourcesenabletheclusterservertocontroltheePolicyOrchestratorserver,bystartingandstoppingtheePolicyOrchestratorservices.
InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide29CreatetheePolicyOrchestratorapplicationroleTheePolicyOrchestratorapplicationroleisrequiredtoseparatetheePolicyOrchestratorapplicationfromtheMicrosoftClusterServicesinyourclusterenvironment.
Task1OpentheFailoverClusterManager:clickServerManager|Tools|FailoverClusterManager.
2RightclickRolesintheSystemTree,thenselectCreateEmptyRole.
3ClickOK.
4Rightclicktheemptyrole,thenselectProperties.
5IntheNewRoledialogbox,typeaNamefortherole.
Forexample,ePO.
6ClickOK.
CreatetheClientAccessPointTheClientAccessPointdefinestheePolicyOrchestratorVirtualIPaddressandVirtualNetworknamessoyourclusternodescancommunicatewithyourMcAfeeePOserver.
Task1RightclicktheePOapplicationrole,thenselectAddaresource|ClientAccessPoint.
TheClientAccessPointWizardappears.
2TypetheePolicyOrchestratorVirtualNameintheNamefieldandspecifytheePolicyOrchestratorVirtualIPaddressintheAddressfield,thenclickNext.
TheConfirmationpageappears.
3ClickNexttoapplytheClientAccessPointchanges,thenclickFinishwhenthewizardiscomplete.
4IftheClientAccessPointisoffline,rightclickthenameandchooseBringOnline.
AddthedatadriveThedatadriveisthelocationwhereyouinstalltheePolicyOrchestratorsoftware.
Usearemotedrivethatallnodesinyourclustercanaccess.
Task1RightclicktheePOapplicationrole,thenselectAddStorage.
2IntheAddStoragedialogbox,selectthedatadrivetouseforyourePolicyOrchestratorinstallation,thenclickOK.
InstallePolicyOrchestratorsoftwareoneachnodeRuntheClusterinstallationoneachofthenodes.
Tomakesurethateachnodehasexclusiveaccesstothequorumanddatadrivesduringinstallation,shutdownallothernodesinthecluster.
Task1DoubleclickSetup.
exeintheinstallationfolder.
2FollowthewizarduntilyoureachtheSetupTypepage,selecttheClusteroption,thenclickNext.
3OntheChooseDestinationLocationpage,specifythepathfortheshareddatadrivethenclickNext.
Ifyouspecifyafolderthatdoesnotexist,installationprocesscreatesafolderwiththatnameinthedesignatedlocation.
Usethissamepathforeachnode.
2InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation30McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide4OntheSetVirtualServerSettingspage(onthefirstnodeonly),providethisidentifyinginformationfortheMcAfeeePOcluster:TheePolicyOrchestratorVirtualServerIPaddressTheePolicyOrchestratorVirtualClusternameTheePolicyOrchestratorVirtualClusterFQDNThisinformationisautomaticallyprovidedonsubsequentnodes.
5CompletetheinstallationonthefirstnodeasdescribedinPerformingCustominstallation.
6Repeatthistaskforeachnodeinyourcluster.
CreatetheGenericServiceresourcesTheGenericServiceresourcesenabletheclusterservertocontroltheePolicyOrchestratorserver,bystartingandstoppingtheePolicyOrchestratorservices.
AddthreeGenericServiceresourcesforusewithyourclusteredePolicyOrchestratorserver.
Usethistableandtasktoconfigureeachresource.
Createtheresourcesintheordertheyarelistedinthetable.
ResourceProperties:GeneraltabProperties:DependenciestabePolicyOrchestrator5.
1.
0ApplicationServerNochangesnecessary.
ePolicyOrchestrator5.
1.
0ServerePolicyOrchestrator5.
1.
0ServerRemovetheStartupparametersandaddablankspace.
Apachewillnotstartwithanystartupparametersspecified,andanemptyentryisnotpermitted.
Therefore,ablankspaceisrequired.
NochangesnecessaryePolicyOrchestratorEventParser5.
1.
0Nochangesnecessary.
ePolicyOrchestrator5.
1.
0ApplicationServerTask1ForeachGenericServiceresourceintheClusterAdministrator,rightclicktheePOapplicationrole,thenselectAddResource|GenericService.
TheNewResourcewizardappears.
2Selectaresource,thenclickNext.
3OntheConfirmationpage,clickNexttocreatetheservice.
Whenthewizardiscomplete,clickFinish.
4Rightclicktheresource,thenselectProperties.
InthePropertiesdialogbox,setthepropertiesspecifiedintheGenericServiceresourceconfigurationstable.
InstallingMcAfeeePolicyOrchestratorPerformclusterinstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide31TesttheePolicyOrchestratorclusterinstallationWhentheePolicyOrchestratorclusterissetupandonline,usethistasktomakesurethatthesoftwarefunctionsinafailoversituation.
Task1Restartthesystemfunctioningastheactivenode.
Thepassivenodeautomaticallybecomestheactivenode.
Theamountoftimerequiredforthepassivenodetobecomeactivedependsonyouruniqueenvironment.
2Manuallyrefreshyourbrowsersession.
Iffailoverissuccessful,youareredirectedtotheePolicyOrchestratorlogonpage.
InstallremoteAgentHandlersEachePolicyOrchestratorservercontainsamasterAgentHandler.
InstallingmoreremoteAgentHandlerscanhelpmanageanincreasednumberofproductsandsystemsmanagedbyasingle,logicalePolicyOrchestratorserverinsituationswheretheCPUonthedatabaseserverisnotoverloaded.
RemoteAgentHandlersrequirethesamehighspeednetworkaccesstoyourdatabaseastheprimaryePolicyOrchestratorserver.
YoucanusemoreIPaddressesforagentservercommunicationbycreatinganAgentHandlergroup,andaddingtheadditionalIPaddresstothevirtualIPaddressinputfield.
Formoreinformation,seeWorkingwithAgentHandlersintheproductguideorHelp.
InstallremoteAgentHandlersYoucaninstallAgentHandlersthroughoutyourenvironmenttohelpmanageagentservercommunicationandloadbalancing.
YoucaninstallremoteAgentHandlersatanytime.
BeforeyoubeginUpdatethesystemwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
Task1OpenthefolderwhereyouextractedthecontentsoftheePolicyOrchestratorsoftwareinstallationpackage.
2CopytheAgentHandlerfoldertotheintendedAgentHandlerserversystem.
3DoubleclickSetup.
exetolaunchtheMcAfeeAgentHandlerInstallShieldwizard.
Aftersomeinstallationactivitiestakeplaceinthebackground,theInstallShieldwizardopens.
ClickNexttobegintheinstallationprocess.
4Afteracceptingthetermsinthelicenseagreement,theDestinationFolderstepopens.
5Acceptthedefaultdestination,orclickChangetoselectadifferentdestination,thenclickNext.
Thedestinationpathmustnotcontaindoublebytecharacters.
ThisisalimitationoftheApachewebserver.
UsingdoublebytecharacterscausestheinstallationtofailandtheApachewebserverservicetofailonstartup.
2InstallingMcAfeeePolicyOrchestratorInstallremoteAgentHandlers32McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide6TheServerInformationstepopens.
aTypethemachinenameoftheMcAfeeePOserverwithwhichtheAgentHandlermustcommunicate.
bSpecifywhichporttouseforAgentHandlertoservercommunication.
Thedefaultportis8444,thesameportusedforClienttoserverauthenticatedcommunication.
UsingthedefaultportenablesAgentHandlertoservercommunicationtobeperformedusingonlyport8444.
Youcanoptionallyspecifyport8443,theConsoletoapplicationservercommunicationport,butdoingsorequiresthatport8444continuestobeavailableforAgentHandlercommunication.
cTypetheePOAdminUsernameandePOAdminPasswordofauserwithePolicyOrchestratorGlobalAdministratorrights.
dClickNexttousetheePOAdmincredentialstoaccessthedatabaseaswell;makesuretheyareassignedtheappropriateSQLServerroleandpermissions.
eDeselectUseePOServer'sdatabasecredentials,thenclickNexttousedifferentcredentialstoaccessthedatabase.
IntheDatabaseInformationpage,specifythesesettings,thenclickNext:DatabaseServerwithinstancename.
Forexample,DBSERVER\SERVERNAME.
Authenticationtype.
Domainnamewherethedatabaseserverishosted.
UsernameandPassword.
Databasenameifnotprovidedautomatically.
7ClickInstalltostarttheinstallation.
Wheninstallationiscomplete,enableyourremoteAgentHandlerfromwithintheePolicyOrchestratorinterface.
FormoreinformationonhowtoenableyourRemoteAgentHandler,seeWorkingwithAgentHandlersintheproductguideorHelp.
Completeafirst-timeinstallationWhenyouhavecompletedtheinstallationprocess,configureyourePolicyOrchestratorserver.
YoucanusetheePolicyOrchestratorGuidedConfigurationtosetupyourserverandmanagedenvironment.
Thisconfigurationtoolisanoverlaytoexistingfeaturesandfunctionalityintendedtohelpyougetyourserverupandrunningquickly.
Formoreinformation,seeUsingtheGuidedConfigurationtoolintheePolicyOrchestratorSoftwareProductGuideorHelp.
InstallingMcAfeeePolicyOrchestratorCompleteafirst-timeinstallation2McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide332InstallingMcAfeeePolicyOrchestratorCompleteafirst-timeinstallation34McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide3RestoringMcAfeeePolicyOrchestratorYoucanrestoretheePolicyOrchestratorsoftwareasarecoveryinstallationwhereyourMicrosoftSQLServeralreadyincludesanePolicyOrchestratorconfigurationfromapreviousinstallation.
SeeInstallingMcAfeeePolicyOrchestratorifthisisafirsttimeinstallation.
ContentsRestoresoftwareinstallationoptionsInstallePolicyOrchestratorsoftwareontherestoreserverRestoreePolicyOrchestratorsoftwareinaclusterenvironmentRestoreremoteAgentHandlerconnectionsRestoresoftwareinstallationoptionsTherearethreerestoreinstallationoptionsforePolicyOrchestratorsoftware.
EachoptionwalksyouthroughtherestoreinstallationprocessusingtheePolicyOrchestratorInstallShieldwizard.
BeforeyoucanruntheePolicyOrchestratorsoftwarerestore,restoretheSQLdatabasebackupfile,thatincludedtheDisasterRecoverySnapshotrecords,totherestoreSQLServer.
SeetheMicrosoftSQLServerdocumentationfordetails.
Usethistabletodeterminewhichrestoreoptionisrightforyourenvironment.
3McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide35InstallationoptionDetailsExpressThemostdirectinstallationpath.
UsethisoptionifyouwanttoaccepttheMcAfeedefaultinstallationsettings.
CustomCustomizeyourinstallation.
Usethisoptionwhenyouwanttospecifythedetailsofyoursoftwareinstallation,including:Thedestinationfolderwherethesoftwareisinstalled(C:\ProgramFiles\McAfee\ePolicyOrchestrator\bydefault).
Theportsused.
InstallingSQLServer2008Expressisoptional.
YoucanalsospecifyadifferentsupportedSQLServer,ifitisinstalledbeforeyoubegintheMcAfeeePOsoftwareinstallation.
ClusterPerformaclusterinstallation.
Usethisoptionwhenyouwanttoinstallintoaclusterenvironment.
Beforeyoubegininstallingthesoftware:YourMicrosoftClusterServer(MSCS)environmentmustbesetup.
YoumusthaveasupportedSQLServerinstalledinalocationaccessibletoyourcluster.
IfyouareupgradingfromapriorversionofMcAfeeePolicyOrchestratorsoftwareoraremigratingfromanevaluationversion,seeUpgradingMcAfeeePolicyOrchestratorsoftware.
InstallePolicyOrchestratorsoftwareontherestoreserverTorecreatetheMcAfeeePOserver,reinstalltheePolicyOrchestratorsoftwareonaserverandlinkittotherestoredSQLdatabase.
BeforeyoubeginMakesurethatyouhaveread,understood,andcompliedwiththeinformationinInstallationrequirementsandrecommendations.
WhenyouselecttheexistingSQLServer,gatherthisinformationandcompletethesestepsbeforebeginningyourinstallationtomakesurethatyourMcAfeeePOsoftwarecancommunicatewiththedatabaseserver:1VerifythattheSQLBrowserServiceisrunning.
2MakesurethattheTCP/IPProtocolisenabledintheSQLServerConfigurationManager.
3UpdatethesystemthathostsyourePolicyOrchestratorserverandyourSQLServerwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
4ConfirmtheSQLbackupfileyoucopiedfromtheprimaryserverwasrestoredusingtheMicrosoftSQLprocess.
5StopremoteAgentHandlerservicesonallsystems,beforerestoringtheePolicyOrchestratorsoftware.
MonitortheentireinstallationprocesswhenusingtheRestoreinstallationprocess.
Youmightneedtorestartyoursystem.
3RestoringMcAfeeePolicyOrchestratorInstallePolicyOrchestratorsoftwareontherestoreserver36McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideTask1IfyouhaveremoteAgentHandlersconfigured,logontothesystemswheretheAgentHandlersareinstalled,thenopentheWindowsServicespanelandstoptheMcAfeeEventParserandMcAfeeApacheservices.
SeeyourMicrosoftsoftwareproductdocumentationformoreinformationonusingtheWindowsServicespanel.
2Usinganaccountwithlocaladministratorpermissions,logontotheWindowsservercomputerusedastherestoreePolicyOrchestratorserver.
3DownloadedfromtheMcAfeewebsite,extractthefilestoatemporarylocation,anddoubleclickSetup.
exe.
DonotattempttorunSetup.
exewithoutfirstextractingthecontentsofthe.
zipfile.
TheMcAfeeePolicyOrchestratorInstallShieldWizardislaunched.
4ClickRestoreePOfromanexistingdatabasesnapshotandNexttobegintherestoreinstallationprocess.
5IntheInstalladditionalsoftwarestep,anyremainingprerequisitesarelisted.
Toinstallthem,clickNext.
Microsoft.
NETFramework2.
0(orlater)isrequiredsoftwarewheninstallingSQLExpress;itisnotinstalledautomatically.
Ifthissoftwareismissing,exittheSetupandacquireandinstallitmanuallybeforeproceeding.
6IntheDestinationFolderstep,click:Next—InstallyourMcAfeeePOsoftwareinthedefaultlocation(C:\ProgramFiles\McAfee\ePolicyOrchestrator(x86)\).
Change—SpecifyacustomdestinationlocationforyourMcAfeeePOsoftware.
WhentheChangeCurrentDestinationFolderwindowopens,browsetothedestinationandcreatefoldersifneeded.
Whenfinished,clickOK.
7IntheDatabaseInformationstep,selecttheMicrosoftSQLServernamefromtheDatabaseServerlistandspecifywhichtypeofDatabaseServerCredentialstouse,thenclickNext.
Windowsauthentication1FromtheDomainmenu,selectthedomainoftheuseraccountyou'regoingtousetoaccesstheSQLServer.
2TypetheUsernameandPasswordofyourrestoredSQLdatabase.
SQLauthenticationTypetheUsernameandPasswordforyourSQLServer.
MakesurethatcredentialsyouproviderepresentanexistinguserontheSQLServerwithappropriaterights.
TheDomainmenuisgrayedoutwhenusingSQLauthenticationYoumightneedtotypetheSQLserverTCPporttouseforcommunicationbetweenyourMcAfeeePOserveranddatabaseserver.
TheePolicyOrchestratorinstallationtriestoconnectusingthedefaultports,1433and1434.
Ifthoseportsfail,youarepromptedtotypeanSQLServerTCPport.
8IntheHTTPPortInformationstep,reviewthedefaultportassignments.
ClickNexttoverifythattheportsarenotalreadyinuseonthissystem.
Youcanmodifysomeoftheseportsnow.
Formoreinformationaboutchangingportvalues,seeHowtochangetheePO4.
5.
0and4.
6.
0AgenttoServercommunicationport.
RestoringMcAfeeePolicyOrchestratorInstallePolicyOrchestratorsoftwareontherestoreserver3McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide379IntheAdministratorInformationstep,typetheUsernameandPasswordyouusedforyourpreviouslyexistingserveradministratoraccount.
10TypetheKeystoreencryptionpassphraseyousavedduringtheinitialinstallationofthepreviouslyexistingMcAfeeePOserver,orchangedintheServerSettings.
TheKeystoreencryptionpassphrasedecryptsthesensitivefilesstoredintheDisasterRecoverySnapshot.
11IntheTypeLicenseKeystep,typeyourlicensekey,thenclickNext.
Ifyoudon'thavealicensekey,youcanselectEvaluationtocontinueinstallingthesoftware.
Theevaluationperiodislimitedto90days.
Youcanprovidealicensekeyafterinstallationiscompletefromwithintheapplication.
Formoreinformation,seetheePolicyOrchestratorSoftwareProductGuideorHelp.
12AccepttheMcAfeeEndUserLicenseAgreementandclickOK.
13FromtheReadytoinstalltheProgramdialogbox,decideifyouwanttosendanonymoususageinformationtoMcAfee,thenclickInstalltobegininstallingthesoftware.
Deselectthecheckboxifyoudon'twantMcAfeetocollectanonymousdiagnosticandusagedata.
14Whentheinstallationiscomplete,clickFinishtoexittheInstallShieldwizard.
ThisdialogboxincludescheckboxestoreadthereleasenotesandtolaunchePolicyOrchestrator.
15IfyourestoredePolicyOrchestratortoaMcAfeeePOserverwithadifferentIPaddressorDNSnamethanyourpreviouslyexistingserver,configureawaytoallowyourmanagedsystemstoconnecttoyournewMcAfeeePOserver.
WerecommendcreatingaCNAMErecordinDNSthatpointsrequestsfromtheoldIPaddress,DNSname,orNetBIOSnameofthepreviouslyexistingMcAfeeePOservertothenewinformationfortherestoreMcAfeeePOserver.
16IfyoustoppedtheremoteAgentHandlersinstep1,logontothesystemswheretheAgentHandlersareinstalled,thenopentheWindowsServicespanelandstarttheMcAfeeEventParserandMcAfeeApacheservices.
YourePolicyOrchestratorsoftwareisnowrestored.
Ifneeded,doubleclickonyourdesktoptostartusingyourMcAfeeePOserver,orbrowsetotheserverfromaremotewebconsole(https://:).
IfyouhaveremoteAgentHandlers,seeRestoreremoteAgentHandlerconnectionstomodifytheirsettingstoconnecttotherestoredservers.
RestoreePolicyOrchestratorsoftwareinaclusterenvironmentTorestoretheMcAfeeePOserversinstalledonserverclusterswithMicrosoftClusterServer(MSCS)software,reinstalltheePolicyOrchestratorsoftwareonallserversintheservercluster.
BeforeyoubeginMakesurethatyouhaveread,understood,andcompliedwiththeinformationinInstallationrequirementsandrecommendations.
3RestoringMcAfeeePolicyOrchestratorRestoreePolicyOrchestratorsoftwareinaclusterenvironment38McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideWhenyouselecttheexistingSQLServer,gatherthisinformationandcompletethesestepsbeforebeginningyourinstallationtomakesurethatyourMcAfeeePOsoftwarecancommunicatewiththedatabaseserver:1VerifythattheSQLBrowserServiceisrunning.
2MakesurethattheTCP/IPProtocolisenabledintheSQLServerConfigurationManager.
3UpdateboththesystemthathostsyourePolicyOrchestratorserverandyourSQLServerwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
4ConfirmtheSQLbackupfileyoucopiedfromtheprimaryserverwasrestoredusingtheMicrosoftSQLprocess.
5StopremoteAgentHandlerservicesonallsystems,beforerestoringtheePolicyOrchestratorsoftware.
MonitortheentireinstallationprocesswhenusingtheRestoreinstallationprocess.
Youmightneedtorestartyoursystem.
RestoringtheePolicyOrchestratorsoftwareinaMicrosoftClusterServerenvironmentissimilartoinstallingthesoftwareinitially.
Theonlynewinstructionsareinstep6ofthistask.
TaskForoptiondefinitions,clickintheinterface.
1IfyouhaveremoteAgentHandlersconfigured,logontothesystemswheretheAgentHandlersareinstalled,thenopentheWindowsServicespanelandstoptheMcAfeeEventParserandMcAfeeApacheservices.
SeeyourMicrosoftsoftwareproductdocumentationformoreinformationonusingtheWindowsServicespanel.
2PerformtheClusterinstallation—SeePerformingClusterinstallationforanoverviewoftheclustersoftwareinstallationprocess.
3InstalltheePolicyOrchestratorsoftwareonWindowsServer2008or2012—SeeInstallonWindowsServer2008or2012foralistoftheinitialsoftwareinstallationtasks.
4CreatetheePolicyOrchestratorapplicationgroup—SeeCreatetheePolicyOrchestratorapplicationgroupforthetasksneededtoseparatetheePolicyOrchestratorapplicationfromtheMicrosoftClusterServicesinyourclusterenvironment.
5CreatetheClientAccessPoint—SeeCreatetheClientAccessPointforthetaskstodefineanePolicyOrchestratorVirtualIPaddressandVirtualNetworknamessoyourclusternodescancommunicatewithyourMcAfeeePOserver.
6Addthedatadrive—SeeAddthedatadriveforthetaskstosetthedatadrivelocationwhereyouinstalltheePolicyOrchestratorsoftware.
RestoringMcAfeeePolicyOrchestratorRestoreePolicyOrchestratorsoftwareinaclusterenvironment3McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide397RestoretheePolicyOrchestratorsoftwareoneachnodeusingthesesteps.
RuntheClusterinstallationoneachofthenodes.
Tomakesurethateachnodehasexclusiveaccesstothequorumanddatadrivesduringinstallation,shutdownallothernodesinthecluster.
aUsinganaccountwithlocaladministratorpermissions,logontotheWindowsservercomputerusedastherestoreePolicyOrchestratorserver.
bRuntheSetupprogramfromthesoftwaredownloadedfromtheMcAfeewebsite,extractthefilestoatemporarylocation,anddoubleclickSetup.
exe.
DonotattempttorunSetup.
exewithoutfirstextractingthe.
zipfile.
TheMcAfeeePolicyOrchestratorInstallShieldWizardislaunched.
cClickRestoreePOfromanexistingdatabasesnapshotandNexttobegintherestoreinstallationprocess.
dFollowthewizarduntilyoureachtheSetupTypepage,selecttheClusteroption,thenclickNext.
eIntheChooseDestinationLocationpage,specifythepathfortheshareddatadrive,thenclickNext.
Usethissamepathforeachnode.
fIntheSetVirtualServerSettingspage(onthefirstnodeonly),providethisidentifyinginformationfortheMcAfeeePOcluster:TheePolicyOrchestratorVirtualServerIPaddressTheePolicyOrchestratorVirtualClusternameTheePolicyOrchestratorVirtualClusterFQDNThisinformationisautomaticallyprovidedonsubsequentnodes.
gCompletetheinstallationonthefirstnodeasdescribedinPerformingCustominstallation.
hRepeatthistaskforeachnodeinyourcluster.
8EnabletheclusterserverGenericServiceresources—SeeCreatetheGenericServiceresourcestocontroltheMcAfeeePOserver,bystartingandstoppingtheePolicyOrchestratorservices.
9IfyoustoppedtheremoteAgentHandlersinstep1,logontothesystemswheretheAgentHandlersareinstalled,thenopentheWindowsServicespanelandstarttheMcAfeeEventParserandMcAfeeApacheservices.
10Makesurethatthesoftwarefunctionsinafailoversituation—SeeTestingtheePolicyOrchestratorclusterinstallationfordetails.
Aftercompletingthesesteps,yourePolicyOrchestratorsoftwareisrestoredonallserversintheservercluster.
RestoreremoteAgentHandlerconnectionsAfteryourestoredyourMcAfeeePOserverandSQLdatabaseyoumustmodifytheremoteAgentHandlersettingstoconnecttotherestoredservers.
BeforeyoubeginUpdatethesystemwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
3RestoringMcAfeeePolicyOrchestratorRestoreremoteAgentHandlerconnections40McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideTaskForoptiondefinitions,clickintheinterface.
1OntheAgentHandlerserversystemfindtheAgentHandlerfolderyouextractedfromtheePolicyOrchestratorsoftwareinstallationpackage.
2DoubleclickSetup.
exetolaunchtheMcAfeeAgentHandlerInstallShieldwizard.
Aftersomeinstallationactivitiestakeplaceinthebackground,theInstallShieldwizardopens.
ClickNexttobeginthemodifyprocess.
3FromtheProgramMaintenancedialogbox,clickModifytochangewhichprogramfeaturesareinstalled.
TheServerInformationstepopens.
4Configurethesesettings:aTypetherestoredmachinenameoftheMcAfeeePOserverwithwhichtheAgentHandlermustcommunicate.
bSpecifywhichporttouseforAgentHandlertoservercommunication.
Thedefaultportis8444,thesameportusedforClienttoserverauthenticatedcommunication.
UsingthedefaultportenablesAgentHandlertoservercommunicationtobeperformedusingonlyport8444.
Youcanoptionallyspecifyport8443,theConsoletoapplicationservercommunicationport,butdoingsorequiresthatport8444continuestobeavailableforAgentHandlercommunication.
cTypetheePOAdminUsernameandePOAdminPasswordofauserwithePolicyOrchestratorglobaladministratorrights.
dClickNexttousetheePOAdmincredentialstoaccessthedatabaseaswell;makesuretheyareassignedtheappropriateSQLServerroleandpermissions.
eDeselectUseePOServer'sdatabasecredentialsthenclickNext.
TheDatabaseInformationstepopens.
5ConfigurethenewcredentialstoaccesstherestoreddatabasethenclickNext:DatabaseServerwithinstancename.
Forexample,DBSERVER\SERVERNAME.
Authenticationtype.
Domainnamewheretherestoreddatabaseserverishosted.
UsernameandPassword.
Databasenameifnotprovidedautomatically.
6ClickInstalltostartthechangestotheinstallation.
Wheninstallationiscomplete,enableyourremoteAgentHandlerfromwithintheePolicyOrchestratorinterface.
FormoreinformationonhowtoenableyourRemoteAgentHandler,seeWorkingwithAgentHandlersintheproductguideorHelp.
YourremoteAgentHandlerscannowcommunicatewiththerestoredMcAfeeePOserverandSQLdatabase.
RestoringMcAfeeePolicyOrchestratorRestoreremoteAgentHandlerconnections3McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide413RestoringMcAfeeePolicyOrchestratorRestoreremoteAgentHandlerconnections42McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide4UpgradingePolicyOrchestratorsoftwareYoucanupgradespecificePolicyOrchestratorversionsof4.
5,4.
6,and5.
0softwaretoversion5.
1.
SeeMinimumePolicyOrchestratorupgradeversionsfordetails.
ContentsThingstodobeforeupgradingUpgradeCompatibilityUtilityoverviewUpgradeyourePolicyOrchestratorserverUpgradeyourePolicyOrchestratorClusterserverUpgradeyourremoteAgentHandlersThingstodobeforeupgradingTosuccessfullycompleteanupgrade,prepareyourenvironmentandmakesureyouhavetheminimumePolicyOrchestratorversion.
Reviewthiscontentbeforebeginningyourupgrade.
Youneedtoperformthefollowingtasks:1Reviewtheunsupportedproductslist.
2BackupallePolicyOrchestratordatabases.
3BackuptheentireePolicyOrchestratordirectory.
4DisableanyremoteAgentHandlersinyourenvironment.
5TurnoffWindowsupdatesbeforeyoubeginyourupgrade.
6Makesurethatyouhaveread,understood,andcompliedwiththerequirementsandrecommendationsdetailedinInstallationrequirementsandrecommendationsbeforeyoubegintheupgrade.
Unlikepreviousversions,ePolicyOrchestratorversion5.
1mustbeinstalledona64bitplatform.
MinimumePolicyOrchestratorupgradeversionsOnlytheseexistingePolicyOrchestratorversionscanupgradetoePolicyOrchestrator5.
1:ePolicyOrchestrator4.
5Patch6orlaterePolicyOrchestrator4.
6Patch4orlaterePolicyOrchestrator5.
0PatchXorlater4McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide43SupportedproductsandknownissuesReviewtheproductsePolicyOrchestratorsupportsandknownissuesbeforecompletingyourinstallationorupgrade.
Toviewanupdatedlistofsupportedproductsandknownissues,seeoneoftheseKnowledgeBasearticles:McAfeeePO5.
0SupportedProducts—KB76736(https://kc.
mcafee.
com/corporate/indexpage=content&id=KB76736)McAfeeePO5.
0installation/patchupgradechecklistforknownissues—KB76739(https://kc.
mcafee.
com/corporate/indexpage=content&id=KB76739)BackupePolicyOrchestratordatabasesanddirectoriesBeforeyouupgradeyoursoftware,backupallePolicyOrchestratordatabases,aswellastheePolicyOrchestratordirectory.
DetailsonperformingthesetasksareavailableintheKnowledgeBasearticleePolicyOrchestrator4.
5and4.
6—KB66616(https://kc.
mcafee.
com/corporate/indexpage=content&id=KB66616)DisableremoteAgentHandlersbeforeupgradingIfyou'reupgradingfromePolicyOrchestrator4.
XandyouuseremoteAgentHandlersinyourenvironment,disablethemtosuccessfullycompleteyourupgrade.
WhenyourremoteAgentHandlersaredisabled,youcanupgradeyourserver.
Oncecomplete,youalsoneedtoupgradeyourAgentHandlers.
SeeUpgradingremoteAgentHandlersformoreinformation.
TaskForoptiondefinitions,clickintheinterface.
1OpentheHandlerListpage:intheePolicyOrchestratorinterface,clickMenu|Configuration|AgentHandlers,thenclickAgentHandlersintheHandlerStatusmonitor.
2IntheHandlerListpage,clickDisableforeachremoteAgentHandleryouhaveinstalled.
3LogontothesystemwheretheAgentHandlerisinstalled,thenopentheWindowsServicespanelandstoptheMcAfeeEventParserandMcAfeeApacheservices.
FormoreinformationonusingtheWindowsServicespanel,seeyourMicrosoftsoftwareproductdocumentation.
4UpgradingePolicyOrchestratorsoftwareThingstodobeforeupgrading44McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideUpgradeCompatibilityUtilityoverviewIfyouareupgradingyourversion4.
x,orlaterePolicyOrchestratorsoftwaretoaversion5.
1ePolicyOrchestratorplatform,runthisutilitytocopyyourexistingconfigurationtotheupgradeserverandruntheProductCompatibilityCheck.
TheUpgradeCompatibilityUtility:Convertsandcopiesyourexistingversion4.
X,orlaterMcAfeeePOsoftwareconfigurationfromyourexistingplatformtoyournewversion5.
1platform.
ThisutilitydoesnotcopyormovetheexistingePolicyOrchestratorSQLdatabase.
SeetheMicrosoftdocumentationtocopytheexistingePolicyOrchestratorSQLdatabaseinstancetoanewdatabaseserver.
RunsaProductCompatibilityCheckthatdeterminesifanyofyourinstalledversion4.
XMcAfeeePOsoftwareextensionsareknowntonotbecompatiblewithyournewupgradeversionofePolicyOrchestrator.
ReusingtheexistingePolicyOrchestratorSQLdatabaseWhenyouupgradeyourexistingversion4.
X,orlaterePolicyOrchestratorservertoaversion5.
1ePolicyOrchestratorplatformyoucanconnectbacktotheprevious32bitePolicyOrchestratorSQLdatabase.
Thisexampleshowsthetwomajorstepsneededtoreusetheexistingdatabase.
Toreusetheexisting32bitePolicyOrchestratordatabase:1UsetheUpgradeCompatibilityUtilitytocopytheexistingePolicyOrchestratorconfigurationtothenewserverandstartanePolicyOrchestratorcustominstallation.
2Duringtheinstallationtoreusetheexistingdatabase,clickMicrosoftSQLServerandselecttheexisting32bitePolicyOrchestratorSQLdatabase.
McAfeerecommendsthatyoudeletetheexisting32bitePolicyOrchestratorsoftwarefromtheexistingservertoensuretwoinstancesofePolicyOrchestratornevertrytoconnecttothesameSQLdatabase.
MakesureyoudeselectAlsoremovetheePolicyOrchestratordatabaseduringtheuninstallationprocessoryouwilldeletethedatabaseusedbytheupgradeserver.
UpgradingePolicyOrchestratorsoftwareUpgradeCompatibilityUtilityoverview4McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide45ProductCompatibilityCheckAninitialProductCompatibilityListisincludedintheePolicyOrchestratorsoftwarepackagedownloadedfromtheMcAfeewebsite.
WhenyouruntheProductCompatibilityCheck,itretrievesthemostcurrentlistofcompatibleextensionsfromatrustedMcAfeesourceovertheInternet.
IftheInternetsourceisunavailable,orifthedownloadedlistcan'tbeverified,ePolicyOrchestratorusesthelatestversionithasavailable.
TheMcAfeeePOserverupdatesthislistinthebackgroundonceadayifyouhavetheProductCompatibilityListenabledintheServerSettings.
WhenyouruntheProductCompatibilityCheck,iteitherconfirmsthatthecurrentproductextensionsarecompatiblewiththenewversionofePolicyOrchestrator,orcreatesalistofblockedordisabledextensions.
BlockedextensionspreventtheePolicyOrchestratorsoftwareupgrade.
Disabledextensionsdonotblocktheupgrade,buttheextensionisnotinitializedaftertheePolicyOrchestratorupgradeuntilaknownreplacementextensionisinstalled.
Thisflowchartdescribesthestepsneededtocompletetheupgradecompatibilityprocess.
4UpgradingePolicyOrchestratorsoftwareUpgradeCompatibilityUtilityoverview46McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideUpgradingePolicyOrchestratorsoftwareUpgradeCompatibilityUtilityoverview4McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide47RuntheutilityYoucanrunthisutilitytoconvertyourexistingePolicyOrchestratorversion4.
Xconfigurationtoanewversion5.
1orlaterconfigurationfile.
Beforeyoubegin1BackupyourePolicyOrchestratordatabasebeforeyouruntheePolicyOrchestratorUpgradeCompatibilityUtility.
2ExtracttheePolicyOrchestrator5.
1installationsoftwareandfindtheUpgradeCompatibilityfolder.
ThatfoldercontainstheUpgradeCompatibility.
exefile.
3Microsoft.
NETFramework3.
5,orlater,isrequiredtousetheUpgradeCompatibilityUtility.
SeetheMicrosoftDownloadCentertodownloadandinstallthissoftwareframework.
Anerrorappearsifthissoftwareframeworkisnotinstalledandyoutrytoruntheutility.
TheutilityalsorunsaProductCompatibilityChecktodetermineifanyexistingproductextensionscouldinterferewithasuccessfulmigrationfromversion4.
Xtoyournewversion5.
1,orlater.
Thisutilityisspecificallydesignedtoconvertyour32bitMcAfeeePOversion4.
Xconfigurationtoa64bitplatformversion5.
1,orlaterconfiguration.
Task1FindandruntheePolicyOrchestratorUpgradeCompatibilityUtility.
aDownloadtheePolicyOrchestrator5.
1softwarefromtheMcAfeewebsite.
ThesoftwareisinthedownloadedePolicyOrchestratorinstallationfile.
bExtractthefilestoatemporarylocation,findthefolderUpgradeCompatibility,anddoubleclickUpgradeCompatibility.
exe.
TheePolicyOrchestratorUpgradeCompatibilityUtilityappears.
2Createtheversion4.
XSourceoutputfile.
aUnderServerType,clickSource.
bClickOutputFile,browsetowhereyouwanttostoretheePolicyOrchestratordatafile,andaddanamewiththeextension.
zip.
BydefaultthefileisstoredasC:\Migrate.
zip.
cTypethisinformationtoremotelylogontoyourexistingMcAfeeePOserver:ePolicyOrchestratorServerURLePolicyOrchestratorAdminUsernameePolicyOrchestratorAdminPassword4UpgradingePolicyOrchestratorsoftwareUpgradeCompatibilityUtilityoverview48McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuidedChoosewhichProductCompatibilityListfiletouse:SelectAutomaticretrievalofProductCompatibilityList—TheProductCompatibilityCheckautomaticallyretrievesthemostcurrentlistfromatrustedMcAfeesourceovertheInternet.
IftheInternetsourceisunavailable,orifthelistcan'tbeverified,itusesthelistdownloadedwiththelatestversionoftheePolicyOrchestratorsoftware.
DeselectAutomaticretrievalofProductCompatibilityList—TheProductCompatibilityCheckusesthemanuallydownloadedProductCompatibilityList.
ClickProductCompatibilityList.
xmltomanuallydownloadthefile.
eClickMigrateorProductCompatibilityCheckandoneoftheseappearsintheePOProductCompatibilityCheckdialogbox:Noincompatibleproductswerefound—Youcancontinuetostep3.
ThecompressionprocesscouldtakemultipleminutesonanEnterpriseePolicyOrchestratorserver.
Alistofincompatibleproducts—Thisisalistofblockedanddisabledextensions.
UsingthislistyoumustreplacetheblockedextensionwithversionsthatarecompatiblewiththisversionofthesoftwareandretrytheProductCompatibilitycheck.
Ifanextensionisdisableditdoesnotblocktheupgrade,buttheextensionisn'tinitializedaftertheePolicyOrchestratorupgradeuntilaknownreplacementextensionisinstalled.
FailedtoloadthelistofinstalledproductsforyourePOinstallation—ThisindicatestheProductCompatibilityListfileisnotavailable,ortheinformationyoutypedtoaccessthesourceMcAfeeePOserverwasincorrect.
Returntostep2candtryagain.
Ifyouinterruptthemigrationfilecreationprocess,starttheprocessoveragaintocreateanewfile.
StatusdisplaysthefilecreationstatusandMigrationCompletedappearswhentheprocessiscomplete.
3Ontheupgradeserver:aDownloadtheePolicyOrchestrator5.
1softwarefromtheMcAfeewebsite.
ThesoftwareisinthedownloadedePolicyOrchestratorinstallationfile.
YoucanalsocopytheePolicyOrchestrator5.
1softwarefromtheexistingversion4.
XMcAfeeePOserverwhereyoudownloadedit.
bExtractthefilestoatemporarylocation,findthefolderUpgradeCompatibility,anddoubleclickUpgradeCompatibility.
exe.
TheePolicyOrchestratorUpgradeCompatibilityUtilityappears.
cCopytheePolicyOrchestratordatafileyoucreatedtotheupgradeserver.
IfyouhaveMcAfeeVirusScanEnterpriseinstalledontheupgradeserver,disabletheOnAccessScanbeforeyoumigrateyourversion4.
Xfilestoyourversion5.
1server.
dUnderServerType,clickTarget.
eClickInputFileandbrowsetowhereyoucopiedthesourceconfigurationfilefromtheversion4.
Xsourceserver.
BydefaultthefileisstoredasC:\Migrate.
zip.
fClickMigratetoextractandconverttheversion4.
XePolicyOrchestratorconfigurationfilesto5.
1orlaterconfigurationfiles.
UpgradingePolicyOrchestratorsoftwareUpgradeCompatibilityUtilityoverview4McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide49StatusdisplaysthefileextractionstatusandMigrationCompletedappearswhentheprocessisdone.
TheextractionprocesscouldtakeseveralminutesonanenterpriseMcAfeeePOserver.
Ifyouinterruptthemigrationfileextractionprocess,simplyrestarttheupgrade5.
1ePolicyOrchestratorserverandstartthemigrationprocessoveragaintoextractthefile.
4RuntheupgradedescribedinUpgradingMcAfeeePolicyOrchestratorsoftware.
Allyourexisting4.
XMcAfeeePOserverconfigurationfileshavebeencopiedtoyourversion5.
1orlaterMcAfeeePOserver.
YouarenowreadytoruntheePolicyOrchestratorsoftwareupgrade.
IfforanyreasonyourePolicyOrchestratorupgradefailsandyouhavemigratedandthenruntheupgradetoversion5.
1ePolicyOrchestrator,reverttothebackupdatabaseonyourversion4.
Xserver.
UpgradeyourePolicyOrchestratorserverYoucanuseSetup.
exetoupgradeyourePolicyOrchestrator4.
Xservertoversion5.
1.
BeforeyoubeginUpdatethesystemthathostsyourePolicyOrchestratorserverwiththelatestMicrosoftsecurityupdates,thenturnoffWindowsupdatesduringtheinstallationprocess.
SeeThingstoknowbeforeupgradingforminimumePolicyOrchestratorupgradeversions.
Werecommendthatyoumonitortheupgradeprocess.
Youmightberequiredtorestartyoursystem.
ThedefaultlocationofePolicyOrchestratorsoftwareis:C:\ProgramFiles(x86)\McAfee\ePolicyOrchestratorTask1Logontothesystemusinganaccountwithlocaladministratorpermissions.
2Ontheupgrade64bitMcAfeeePO5.
1server,downloadtheePolicyOrchestrator5.
1softwarefromtheMcAfeewebsite.
ThesoftwareisinthedownloadedePolicyOrchestratorinstallationfile.
3ExtractthefilestoatemporarylocationandfindanddoubleclickSetup.
exe.
Ifanyprerequisitesoftwareismissingfromtheinstallationtargetcomputer,alistofthoseitemsappears.
ClickNext.
Theinstallationprocessforeachsoftwareitemlistedbeginsautomatically.
4IntheWelcomewindowoftheinstallationwizard,clickNext.
AwarningmessagemightappearlistingproductsfromyourpreviousversionofePolicyOrchestratorthatarenolongersupportedwiththe5.
1versionofthesoftware.
TheseproductsarenotmigratedtotheePolicyOrchestrator5.
1repository.
5IntheGlobalAdministratorInformationdialogbox,typetheusernameandpasswordoftheglobaladministratorforthecurrentserver,thenclickNext.
6FromtheReadytoinstalltheProgramdialogbox,decideifyouwanttoSendanonymoususageinformationtoMcAfee,thenclickInstalltobegininstallingthesoftware.
Deselectthecheckboxifyoudon'twantMcAfeetocollectanonymousdiagnosticandusagedata.
7IntheInstallShieldWizardCompleteddialogbox,clickFinishtocompletetheinstallation.
4UpgradingePolicyOrchestratorsoftwareUpgradeyourePolicyOrchestratorserver50McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideUpgradeyourePolicyOrchestratorClusterserverUpgradingyourePolicyOrchestratorsoftwareinaclusterenvironmentrequiresspecialconsideration.
BeforeyoubeginIfyouareupgradingtoversion5.
1oftheePolicyOrchestratorsoftware,andyourcurrentenvironmentisnotsupportedbythisversion,youmusttakethenecessarystepstoupgradeyourenvironmentbeforeupgradingyourePolicyOrchestratorsoftware.
YoucanupgradeyourePolicyOrchestratorclusterserverfromspecificversionsof4.
5and4.
6toversion5.
1ofthesoftware.
SeeThingstoknowbeforeupgradingforminimumePolicyOrchestratorupgradeversions.
Task1Fromtheactivenode,opentheePOgroupinyourWindowsClusterManagementtool(2008:FailoverClusterManagement).
TakeeachoftheseGenericServiceresourcesoffline,thendeletethem:McAfeeePolicyOrchestrator4.
x.
xServerMcAfeeePolicyOrchestrator4.
x.
xApplicationServerMcAfeeePolicyOrchestrator4.
x.
xEventParserDonotmodifytheseresources,whicharerequiredforasuccessfullyupgrade:DatadriveePolicyOrchestratorvirtualIPaddressePolicyOrchestratorvirtualNetworkName2OpentheServicesControlManagerandmakesurethattheseservicesarerunning:McAfeeePolicyOrchestrator4.
x.
xServerMcAfeeePolicyOrchestrator4.
x.
xApplicationServerMcAfeeePolicyOrchestrator4.
x.
xEventParserRepeatthissteponeachnodebeforeyoubegininstallingyournewsoftware.
3InstallyournewePolicyOrchestratorsoftwareoneachnode.
Ifyou'reupgradingfromversion4.
5,considerthenodeorderinwhichyouoriginallyinstalledversion4.
5.
Beginyourupgradeonthesamenodeastheoriginalinstallation.
Forexample,ifyouinstalledePolicyOrchestratorsoftwareversion4.
5onnodesA,B,andC,inthatorder,upgradenodeAfirst.
Theorderinwhichyouupgradesubsequentnodesdoesnotmatter.
Fordetailedinstallationsteps,seeInstallePolicyOrchestratorsoftwareoneachnodeunderPerformClusterinstallation.
4Aftercompletinginstallationoneachnode,createthenewGenericServiceresourcesforversion5.
1ofthesoftware.
Configurationfortheseresourcesdependsonyouroperatingsystem.
Foroperatingsystemspecificconfigurationdetails,seeCreatetheGenericServiceresourcesunderPerformClusterinstallation.
UpgradingePolicyOrchestratorsoftwareUpgradeyourePolicyOrchestratorClusterserver4McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide51UpgradeyourremoteAgentHandlersWhenyouupgradeyourePolicyOrchestratorserversoftware,upgradeanyremoteAgentHandlersinstalledthroughoutyourenvironment.
AgentHandlersmustbeupgradedseparately.
RemoteAgentHandlersinstalledwithpreviousversionsofyoursoftwarearenotcompatiblewiththisnewversion,andarenotupgradedautomatically.
TheupgradeprocessisastreamlinedversionoftheprocedureusedforfirsttimeinstallationofaremoteAgentHandler,detailedinInstallremoteAgentHandlersunderInstallingMcAfeeePolicyOrchestratorsoftware.
TaskForoptiondefinitions,clickintheinterface.
1CopytheAgentHandlerfolderincludedintheePolicyOrchestratorsoftwareinstallationpackagetothetargetsystem.
2DoubleclickSetup.
exetolaunchtheMcAfeeAgentHandlerInstallShieldwizard.
3ClickNexttobegintheupgradeprocess.
4Acceptthelicenseagreement,thenclickOK.
5ClickInstalltobegintheinstallation.
6TheInstallShieldwizardcompletestheinstallationwithoutanyadditionalinput.
Whenthewizardiscomplete,clickFinish.
7Whentheupgradeiscomplete,youmustenableyourremoteAgentHandlerfromwithintheePolicyOrchestratorinterface.
FormoreinformationonenablingyourRemoteAgentHandler,seeWorkwithAgentHandlersintheProductGuideorHelp.
4UpgradingePolicyOrchestratorsoftwareUpgradeyourremoteAgentHandlers52McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide5UninstallingePolicyOrchestratorsoftwareYoumightneedtouninstalltheePolicyOrchestratorsoftwareif,forexample,youarereinstallingitonanotherserver.
Usethesetopicstocompletetheuninstallprocess.
IfyouintendtoreinstallePolicyOrchestratorsoftwarelater,andwanttomanageagentsdeployedbythecurrentinstallation,backupyouragentservercommunicationkeys.
Youcannotrestorethesekeyslater.
ContentsUninstallExpressandCustominstallationsUninstallclusterinstallationsUninstallExpressandCustominstallationsUninstallingtheePolicyOrchestratorsoftwareforExpressandCustominstallationsrequiresspecificconsiderationofyourdatabase.
IfyouusedtheSetupprogramtoinstallSQL2008Express,youcanremovethedatabaseaddedtothatSQLServerwhenyouremovetheePolicyOrchestratorsoftware.
Task1Closealldatabasemanagementsoftware.
2OnthesystemwhereyourePolicyOrchestratorserverisinstalled,opentheWindowsControlPanel,thenclickProgramsandFeatures|McAfeeePolicyOrchestrator|Uninstall/Change.
3TheRemoveMcAfeeePolicyOrchestratordialogboxopens.
SelectwhethertoAlsoremovetheePolicyOrchestratordatabase,thenclickRemove.
Supplycredentialstograntsufficientpermissionstoremovethedatabase.
Iftheprovidedcredentialsarenotsufficient,youcanselecttocompletetheuninstallprocesswithoutremovingthedatabase.
FormoreinformationaboutSQLServerpermissions,seeMaintainingyourePolicyOrchestratordatabasesintheproductguideorHelp.
5McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide53UninstallclusterinstallationsUninstallingePolicyOrchestratorfromaclusterenvironmentrequiresthatyoutakespecificsteps,dependingonwhichserverclassoperatingsystemyouarerunning.
Task1TosetallMcAfeeePOservicestooffline,opentheWindowsClusterAdministrator/Managementtool,thenclickStart|Programs|AdministrativeTools|FailoverClusterManagement.
2IntheMcAfeeePOapplicationgroup,rightclickeachoftheMcAfeeePOresourcesandselectDelete.
3Touninstallthesoftware,clickProgramsandFeatures|McAfeeePolicyOrchestrator|Uninstall/Change.
4Repeatthistaskoneachnodeinyourcluster.
5UninstallingePolicyOrchestratorsoftwareUninstallclusterinstallations54McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide6TroubleshootingandlogfilereferenceThemostcommonmessagesthatappearwhileinstallingMcAfeeePolicyOrchestratorduringaninstallationandtheirsolutionsarelistedhere.
Usethisinformationtotroubleshootproblemswithyourinstallation.
Ifyouareunabletoresolveanissueusingtheinformationinthistable,contactMcAfeeTechnicalSupportafteryouhavetakenthesesteps:1Verifythatyouhavemettheminimuminstallationrequirements.
2ReviewtheMcAfeeePolicyOrchestrator5.
1ReleaseNotes(Readme.
html)foranyknowninstallationissues.
3Verifythattheaccountyouusedtologontothecomputerwhereyouareinstallingthesoftwarehasfulladministratorpermissionstothatcomputer.
4Collecttheexacttextofallmessages,andmakesuretowritedownanymessagecodesthatappear.
5Gathertheinstallationlogfiles.
ContentsCommoninstallationmessagesandtheircausesandsolutionsLogfilesfortroubleshootingCommoninstallationmessagesandtheircausesandsolutionsePolicyOrchestratorsoftwareprovidesfeedbackduringinstallationthatmightrequireadditionalaction.
Reviewthistableformoreinformationonactionsrequiredifthesemessagesappear.
MessageCauseSolutionYouareattemptingtoupgradefromaproductversionthatisnotsupported.
Foracompletelistofupgraderequirements,seetheMcAfeeePolicyOrchestratorInstallationGuide.
NoversionofePolicyOrchestratorsoftwarehasbeeninstalledonthiscomputer.
YoucanonlyupgradefromtheMinimumePolicyOrchestratorupgradeversionslistedunderThingstoknowbeforeupgrading.
SeeInstallingMcAfeeePolicyOrchestratorsoftwareinthisguideandselectanappropriateinstallationoption.
InternetExplorer8.
0orlater,orFirefox10needstobeinstalledforthisinstallationtocontinue.
Thecomputerwhereyouareattemptingtoinstallthesoftwareisusingaunsupportedversionofthebrowser.
InstallasupportedInternetbrowserbeforecontinuing.
Formoreinformation,seeSupportedInternetbrowsers.
6McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide55MessageCauseSolutionAnotherinstanceoftheePolicyOrchestratorinstallerisalreadyrunning.
TheePolicyOrchestrator5.
1Setupprogramisalreadyrunning.
YoucannotrunmorethanoneinstanceofSetupatatime.
Allowthefirstinstanceoftheinstallertocomplete,orstopthefirstinstanceandrestartyourinstallation.
Forsecurityreasons,McAfeedoesnotallowblankpasswords.
Pleasetypeavalidpasswordtocontinue.
ThePasswordboxisblank.
Specifythepasswordoftheuseraccountthatyouwanttouse.
Werecommendthatyousetthevideodisplayresolutionto1024x768orhigher.
Thecomputerwhereyouareattemptingtoinstallthesoftwaredoesnotmeettheminimummonitorresolutionrequirement.
Changethemonitorresolutionto1024x768orhigher,thencontinuetheinstallation.
Otherwise,youmightnotbeabletoviewtheentirescreenafteryoustartthesoftware.
Forinstructionsonchangingthemonitorresolution,seetheWindowsHelpfile(clickStart,thenselectHelp).
Werecommendthatyouinstallthesoftwareonacomputerwithatleast2GBofRAM.
Thecomputerwhereyouareattemptingtoinstallthesoftwaredoesnotmeettheminimummemoryrequirement.
Addmorememorytoyoursystemorselectadifferentsystemforinstallationthathasatleast2GBofRAM.
ePolicyOrchestrator5.
1softwarerequiresthatyourcomputerisrunningWindowsServer2008,orWindowsServer2012.
Thecomputerwhereyouareattemptingtoinstallthesoftwareisusinganonsupportedversionoftheoperatingsystem.
SeeSupportedserverclassoperatingsystems.
Enteravalueinthe"AgentBroadcastcommunication"field.
TheAgentBroadcastcommunicationportboxisblank.
Specifytheportnumber(defaultis8082)thattheePolicyOrchestratorserverusestosendagentwakeupcallstoSuperAgents.
Enteravalueinthe"AgenttoServercommunication"field.
TheAgenttoServercommunicationportboxisblank.
Specifytheportnumberthattheagentusestocommunicatewiththeserver.
Enteravalueinthe"AgentWakeUpcommunication"port.
TheAgentWakeUpcommunicationportboxisblank.
Specifytheportnumber(defaultis8081)thattheePolicyOrchestratorserverusestosendagentwakeupcalls.
ePolicyOrchestratormustbeinstalledinafolder.
EnteraDestinationFoldertocontinue.
TheDestinationFolderboxisblankorshowstherootofadrive.
ClickBrowsetoselectalocation.
Thedefaultlocationis:C\ProgramFiles\McAfee\ePolicyOrchestrator.
Enteravalueinthe"UserName"field.
TheUsernameboxisblank.
Specifytheusernameoftheaccountthatyouwanttouse.
TheLicensefileismissingorcorrupt.
Contactsupportforassistance.
Setupisunabletoreadthelicenseinformationrequiredtoinstallthesoftware.
ContactMcAfeeTechnicalSupport.
TheoperatingsystemorServicePackyouareusingisnotcurrentlysupported.
Foracompletelistofsystemrequirements,seetheMcAfeeePolicyOrchestratorInstallationGuide.
Thecomputerwhereyouareattemptingtoinstallthesoftwareisusinganonsupportedversionoftheoperatingsystem.
SeeSupportedserverclassoperatingsystems.
6TroubleshootingandlogfilereferenceCommoninstallationmessagesandtheircausesandsolutions56McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideMessageCauseSolutionThepasswordsyoutypeddonotmatch.
Typeavalidpasswordtocontinue.
ThevalueyoutypedinPasswordandConfirmPassworddonotmatch.
Specifythepasswordoftheaccountthatyouwanttouse.
TheePolicyOrchestratorlicensehasexpired.
Yourlicensetousethesoftwarehasexpired.
ContactyouradministratorordesignatedMcAfeerepresentative.
ThissystemisnotcurrentlyconfiguredwithastaticIPaddress,whichisrecommendedfortheePolicyOrchestratorserver.
ThecomputerwhereyouareattemptingtoinstallthesoftwaredoesnotuseastaticIPaddress.
WerecommendusingstaticIPaddressesforePolicyOrchestratorserverstoimproveperformanceandreducebandwidthuse.
SpecifyastaticIPaddressforusewithyourePolicyOrchestratorserver.
Unabletomakeaconnectiontothedatabaseserver.
Verifythatyouprovidedtheaccountcredentialsanddatabaseservernamecorrectly,thentryagain.
Ifthismessagecontinuestoappear,seetheePolicyOrchestratorInstallationGuideformoreinformation.
AconnectioncouldnotbemadetothecorrespondingePolicyOrchestratordatabaseserver.
1VerifythattheDomain,UserName,andPasswordyouprovidedaretypedcorrectly.
2Verifythatthedatabaseserverisrunning.
3Verifythattheuseraccountyouprovidedisvalidforthedatabaseserver.
Unabletoconnectusingtheinformationyouprovided.
Verifythatyouenteredthecorrectinformationandtryagain.
Theuseraccountthatyouspecifiedcouldnotbeaccessed.
1VerifythattheDomain,UserName,andPasswordyouprovidedaretypedcorrectly.
2Verifythattheaccountyouusedtologontothiscomputerhasaccesstothisdomain.
LogfilesfortroubleshootingePolicyOrchestratorprovideslogfilesthatcontainimportantinformationwhentroubleshooting.
Theselogfilesareseparatedintothreecategories:TroubleshootingandlogfilereferenceLogfilesfortroubleshooting6McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide57Installerlogs—Includedetailsaboutinstallationpath,usercredentials,databaseused,andcommunicationportsconfigured.
Serverlogs—Includedetailsaboutserverfunctionality,clienteventhistory,andadministratorservices.
Agentlogs—Includedetailsaboutagentinstallation,wakeupcalls,updating,andpolicyenforcement.
InstallerlogsInstallerlogfileslistdetailsabouttheePolicyOrchestratorinstallationprocess.
Theselogsprovideinformationabout:ActionstakenbyspecificcomponentsAdministratorservicesusedbytheserverSuccessandfailureofcriticalprocessesFilenameLogtypeLocationDescriptionAH500InstallMSI.
logAgentHandlerinstallation%temp%\McAfeeLogsThisfilelogsallAgentHandlerinstallationdetailsincluding:InstalleractionsInstallationfailuresAH500ahetupdll.
logTemporary%temp%(ontheAgentHandlerserver)LogsAgentHandlerbackendevents.
coreinstall.
logTemporary%temp%\McAfeeLogs\ePO500Troubleshoot\MFSGeneratedwhenePolicyOrchestratorinstallercallstheMFSANTinstaller.
Providesinformationon:CreationofserverdatabasetablesInstallationofservercomponentsThisfileisdeletediftheinstallationsucceeds.
epoinstall.
logInstallation%temp%\McAfeeLogs\ePO500Troubleshoot\MercuryFrameworkCreatedwhentheePolicyOrchestratorinstallercallstheANTinstaller.
EPO500CheckinFailure.
logInstallation%temp%\McAfeeLogsGeneratedwhenePolicyOrchestratorinstallerfailstocheckinanyofthesepackagetypes:ExtensionsPluginsDeploymentpackagesAgentpackages6TroubleshootingandlogfilereferenceLogfilesfortroubleshooting58McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideFilenameLogtypeLocationDescriptionEPO500CommonSetup.
logInstallation%temp%\McAfeeLogsContainsePolicyOrchestratorinstallerdetailssuchas:CustomActionloggingSQL,DTS(MicrosoftDataTransformationServices),andservicerelatedcallsRegisteringandunregisteringDLLsFilesandfoldersselectedfordeletionatrestartEPO500InstallMSI.
logInstallation%temp%\McAfeeLogsTheprimaryePolicyOrchestratorinstallationlog.
Containsinstallationdetailssuchasinstalleractionsandinstallationfailures.
.
cmdTemporary%temp%\McAfeeLogs\ePO500troubleshoot\OutputFilesCreatedbytheePolicyOrchestratorinstaller.
Containsthecommand(senttoRemoteClient)tocheckinextensions.
Iftheinstallationsucceeds,thesefilesaredeleted.
MFS500CommonSetup.
logInstallation%temp%\McAfeeLogsContainsMFSinstallerdetails.
ServerlogsServerlogfilescontaindetailsonserverfunctionalityandvariousadministratorservicesusedbyePolicyOrchestrator.
FilenameLogtypeLocationDescriptionEpoApSvr.
logPrimary[InstallDir]\DB\LogsApplicationServerlogfilewithdetailsofrepositoryactionssuchas:PulltasksCheckingindeploymentpackagestotherepositoryDeletingdeploymentpackagesfromtherepositoryThisfileisnotpresentuntilafterinitialservicestartup.
Errorlog.
Apache[InstallDir]\Apache2\logsContainsApacheservicedetails.
ThisfileisnotpresentuntilaftertheApacheserviceisstartedforthefirsttime.
Eventparser.
logPrimary[InstallDir]\DB\LogsContainsePolicyOrchestratoreventparserservicesdetails,suchasproducteventparsingsuccessorfailure.
TroubleshootingandlogfilereferenceLogfilesfortroubleshooting6McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide59FilenameLogtypeLocationDescriptionJakarta_service_.
logTomcat[InstallDir]\Server\logs*ContainsePolicyOrchestratorApplicationServerservicedetails.
ThisfileisnotpresentuntilaftertheinitialTomcatservicestartup.
Localhost_access_log.
.
txtTomcat[InstallDir]\Server\logs*RecordsallMcAfeeePOserverrequestsreceivedfromclientsystems.
ThisfileisnotpresentuntilaftertheinitialTomcatservicestartup.
Orion.
logPrimary[InstallDir]\Server\logs*ContainsMcAfeeFoundationServicesplatformdetailsandallextensionsloadedbydefault.
ThisfileisnotpresentuntilaftertheePolicyOrchestratorApplicationServerserviceisstartedforthefirsttime.
Replication.
logServer[InstallDir]\DB\LogsTheMcAfeeePOserverreplicationlogfile.
Thisfileisonlygeneratedwhenallthesearetrue:Therearedistributedrepositories.
Areplicationtaskhasbeenconfigured.
Areplicationtaskhasrun.
Server.
logPrimary[InstallDir]\DB\LogsContainsdetailsrelatedtotheseMcAfeeePOserverservices:AgentservercommunicationsMcAfeeePOServerAgentHandlerThisfileisnotpresentuntilafterinitialservicestartup.
Stderr.
logTomcat[InstallDir]\Server\logs*ContainsanyStandardErroroutputcapturedbytheTomcatservice.
ThisfileisnotpresentuntilaftertheinitialTomcatservicestartup.
*Inclusterenvironments,thelogfileislocatedat[InstallDir]\Bin\Server\logs.
6TroubleshootingandlogfilereferenceLogfilesfortroubleshooting60McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideAgentlogsAgentlogfilescontainactionstriggeredortakenbytheMcAfeeAgent.
FilenameLogtypeLocationDescription__Server.
xmlPolicy[InstallDir]\DB\DEBUGContainsdetailsaboutpolicyupdatingissues.
Toenablethisfile:1Browsetothisregistrykey:HKEY_LOCAL_MACHINE\Software\NetworkAssociates\ePolicyOrchestrator\2CreatethisDWORDwithvalue1:SaveAgentPolicy3RestarttheMcAfeeePolicyOrchestrator5.
1.
0Server(Apache)service.
Werecommendthatyouenablethisfilefortheminimumtimeneededtocapturetherequiredinformation,becausetheresultingfilesgrowrapidly.
Agent_.
logAgent[AgentDATAPath]\DBGeneratedonclientsystemswhentheserverdeploysanagenttothem.
Thisfilecontainsdetailsrelatedto:AgentservercommunicationPolicyenforcementOtheragenttasksFrmInst_.
logAgent%temp%\McAfeeLogsGeneratedwhentheFrmInst.
exeisusedtoinstalltheMcAfeeAgent.
Thisfilecontains:Informationalmessages.
Progressmessages.
Failuremessagesifinstallationfails.
MCScript.
logAgentDebug[AgentDATAPath]\DBContainstheresultsofscriptcommandsusedduringagentdeploymentandupdating.
ToenabletheDEBUGmodeforthislog,setthisDWORDvalueontheclient'sregistrykey:HKEY_LOCAL_MACHINE\SOFTWARE\NETWORKASSOCIATES\TVD\SHAREDCOMPONENTS\FRAMEWORK\DWDEBUGSCRIPT=2Deletethiskeywhenyou'vefinishedtroubleshooting.
MfeAgent.
MSI.
.
logAgent%temp%\McAfeeLogsContainsdetailsabouttheMSIinstallationoftheagent.
PrdMgr_.
logAgent[AgentDATAPath]\DBContainsdetailsaboutagentcommunicationswithotherMcAfeeproducts.
UpdaterUI_.
logAgent%temp%\McAfeeLogsContainsdetailsoftheupdatestomanagedproductsontheclientsystem.
TroubleshootingandlogfilereferenceLogfilesfortroubleshooting6McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide61McAfeeAgenterrorlogsWhentheMcAfeeAgenttrapserrors,theyarereportedinAgenterrorlogs.
Agenterrorlogsarenamedfortheirprimarylogcounterpart.
Forexample,whenerrorsoccurwhileperformingclienttasks,theMCScript_Error.
logfileiscreated.
Errorlogscontainonlydetailsabouterrors.
6TroubleshootingandlogfilereferenceLogfilesfortroubleshooting62McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuideIndex32-bitserver-classoperatingsystemssupported,AgentHandlers1132-bitto64-bitplatformconversionutility4864-bitserver-classoperatingsystemssupportedAgentHandlers11ePolicyOrchestrator9Aaboutthisguide5AgentHandlersinstallation32operatingsystems11restoreconnections40upgrading52applicationgroupinaclusterinstallation27AutomaticProductConfigurationdisablecommandlineparameter22overview14Bbrowserssupported11CChromebrowser11ClientAccessPointconfigurationinaclusterinstallation27,30clusterinstallationrestore38WindowsServer200826WindowsServer201229clusterserversinstallation25restore38terminology25testing32uninstalling54upgrading51communicationports,Seeportsconventionsandiconsusedinthisguide5Ddatadriveconfigurationinaclusterinstallation28,30databasecollation10databaseserverscommunicationport13supportfor10upgradefromversion4.
Xto5.
1ePO48DisasterRecoverySnapshotKeystoreencryptionpassphrase,thingstoknowbeforeinstallation11keystoreencryptionpasswordsetduringCustominstallation23keystoreencryptionpasswordusedduringCustominstallation22distributedrepositories14requirements14documentationaudienceforthisguide5product-specific,finding6typographicalconventionsandicons5EePolicyOrchestratorsoftwareminimumupgradeversions43restoreprocess36Snapshot36FFirefox11GGenericServiceresourcesinaclusterinstallation28,31IinstallationAgentHandlers32cluster26,29completing33customcompletion23customsetup22express19options17,35preparingfor11preparingfor,clusterservers25requiredSQLServerroles13servers17,35McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide63Internetbrowserssupportfor11InternetExplorer11EnhancedSecurity11KkeystoreencryptionpassphrasesetduringCustominstallation23thingstoknowbeforeinstallation11usedwithDisasterRecoveryCustominstallation22Llanguagessupported9MMcAfeeServicePortal,accessing6MicrosoftSQLServers10Nnestedtriggers10OoperatingsystemssupportedAgentHandlerservers11ePolicyOrchestratorservers9Pportschanging13defaultvalues13Qquorumanddatadriveconfigurationinaclusterinstallation28,30Rrequirementsdistributedrepositories14hardware7operatingsystems9software8SQLServerroles13restoreclusterinstallation38ePolicyOrchestratorsoftware36remoteAgentHandlerconnectionstoservers40SSafaribrowser11serversinstallation17,35servers(continued)uninstalling53upgrading50virtualinfrastructure10ServicePortal,findingproductdocumentation6SQLServersbackupfile36backupfileincluster38configurationrequirements10installation12installationrequirements13roles13supportfor10upgradescenarios12supportforAgentHandleroperatingsystems11Internetbrowsers11operatingsystems9SQLServers10virtualservers10supportedproducts15,44TTechnicalSupport,findingproductinformation6Uuninstallingclusterservers54servers53UpgradeCompatibilityUtility48upgradingAgentHandler52clusterservers51prepareyourenvironmentandminimumePolicyOrchestratorversion43servers50Vvirtualserverssupported10WWindowsServer2008clusterinstallation26supportforAgentHandlers11supportforePolicyOrchestrator9WindowsServer2012clusterinstallation29supportforAgentHandlers11supportforePolicyOrchestrator9Index64McAfeeePolicyOrchestrator5.
1.
0SoftwareInstallationGuide00