McAfee EPOLICY ORCHESTRATOR 4.5 Product Manual page 66

Distributing Agents to Manage Systems
Installing the McAfee Agent
Method
Using third-party software such as
Microsoft Systems Management Server
(SMS) or IBM Tivoli
Using login scripts (Windows only)
Deploying the agent: A deployment task is created in ePolicy Orchestrator and is sent to the client where it runs.
If the repository contains a newer version of the agent, the deployment task pull down the newer version and installs
it over the existing version.
Using ePolicy Orchestrator
Upgrading agents using the
deployment task
Deploying an image containing the
agent (Windows)
Enabling the agent on unmanaged
McAfee products (Windows)
Enabling the agent on unmanaged
McAfee products (UNIX-based
platforms)
Installing on Windows from ePolicy Orchestrator
You must have administrator privileges on the Windows system to perform this task. The agent
extension must be installed on the ePolicy Orchestrator server before the agent is installed on
any clients.
66 McAfee ePolicy Orchestrator 4.5 Product Guide
Action
Configure your third-party software to
distribute the agent installation
package, which is located on your ePO
server.
The network administrator creates an
installation or upgrade script, which
runs at each logon to a system.
The ePO administrator specifies the
systems and selects Install Agent
when adding a new system.
Use the ePO System Tree to upgrade
the agent on selected target systems.
Administrator creates an image that
contains the agent and deploys the
image. Before creating the image, the
administrator removes the agent GUID
and MAC address from the agent
section of the registry.
Using the System Tree, the ePO
administrator selects the systems to
be converted from unmanaged status
to managed status and selects Install
agents.
Type the following command on the
system containing the agent you want
to enable:
/opt/McAfee/cma/bin/msaconfig
-m -d
<Path of location containing
srpubkey.bin , reqseckey.bin and
[-nostart]
SiteList.xml>
Notes
upgrade products and update
product content..
• The agent installation package
contains necessary security keys
and the site list.
• See third-party instructions.
• The user must log on to the
system to trigger the installation
or upgrade.
• The installation package must be
in a location accessible to the
system.
• Selecting a large number of
systems can temporarily affect
network throughput.
• You must specify credentials with
administrator rights to the target
systems.
• Requires that an agent is already
present on the target system.
• Removing the GUID and MAC
address allows the agent to
generate a new GUID and MAC
address upon the first
agent-server communication.
• Failure to remove the GUID and
MAC address results in
"sequencing errors" from the
multiple identical systems
• Requires an agent on the target
system in unmanaged mode.
• You must have root privileges to
perform this action.
• You must use the srpubkey.bin,
reqseckey.bin and SiteList.xml
files from the ePO server.