McAfee EPOLICY ORCHESTRATOR 4.0.2 Product Manual page 89

Distributing Agents to Manage Systems
Maintaining the agent
1 Export the desired ASSC keys from the desired ePO server.
2 Import the ASSC keys to all other servers.
3 Make the imported key the master on all servers.
4 Run an agent update task so that all agents begin using the keys immediately.
5 When all agents are using the new keys, delete any unused keys.
6 Back up all keys.
Using a different ASSC key pair per ePO server
Use this task to ensure all agents can communicate with any required server in an environment
where each ePO server is required to have a unique ASSC key pair.
You can ensure that agents can communicate with multiple servers by importing the necessary
key pairs into all servers with which the agents may communicate.
Task
For option definitions, click ? on the page displaying the options.
1 Export the master ASSC key pair from each ePO server in your environment.
2 Import each of these key pairs into every server.
Generating and using new ASSC keys
Use this task to generate new agent-server secure communication (ASSC) keys. Do this if you
discover a key has been compromised. McAfee recommends creating and using new ASSC keys
routinely, for example every three months.
Task
For option definitions, click ? on the page displaying them.
1 Go to Configuration | Server Settings, then select Security Keys in the Setting
Categories list.
2 Click Edit in the details pane. The Edit Security Keys page appears.
3 Click New Key next to the Agent-server secure communication keys list
4 When you want agents to use the new key, select the key in the list, then click Make
Master.
Agents version 3.6 or later begin using the new key at the first agent-server communication
after their next update task completes.
5 Delete the old key only after all agents have stopped using it.
To the right of every key in the list is the number of agents currently using it.
6 Back up all keys.
Exporting ASSC keys to allow agents to access multiple ePO servers
Use this task to export ASSC keys for use by other ePO servers in your environment.
Task
For option definitions, click ? on the page displaying the options.
McAfee ePolicy Orchestrator 4.0.2 Product Guide 89