ePolicy Orchestrator 5.0 installation / patch upgrade checklist for known issues

Technical Articles ID:    KB76739
Last Modified:    August 13, 2013
 

Environment

McAfee ePolicy Orchestrator 5.0

For details of all supported operating systems, see KB51109.

Summary

The following is an upgrade checklist for known issues with full product installations and patch upgrades for ePolicy Orchestrator (ePO) 5.0.

McAfee recommends that you perform these operations directly on the ePO server and not through a remote connection. If you must use a remote connection, ensure that you are connected using the console session (session 0).

 

Back up your ePO server
For more information, see: 

  • ePO 4.6/4.5 – KB66616 – ePO 4.5 and 4.6 server backup and disaster recovery procedure 
     

Review the product or patch release notes for known issues and new features 

See the McAfee Product Documentation page at: https://mysupport.mcafee.com/Eservice/productdocuments.aspx

Ensure that the ePO server has enough Hard Disk Space for the upgrade

  • System Temp folder – Requires 2 GB or more.
  • ePO Installation folder – Requires the same size as McAfee\ePolicy Orchestrator folder.

    NOTE: If the ePO server is installed in C:\Program Files\McAfee\ePolicy Orchestrator and the ePolicy Orchestrator folder is about 1.5 GB in size, the required available Hard Disk space in C drive will be more than 1.5 GB.


Disable ePO server tasks and any Windows scheduled tasks that may be set to run on the ePO server
Disable any tasks that would interfere with the installation (such as purge events, pull tasks, and replication tasks).

For information on editing tasks, see the product guide for your version of ePO: 

  • PD24350 – ePolicy Orchestrator 5.0 Product Guide
  • PD22975 – ePolicy Orchestrator 4.6 Product Guide
  • PD21812 – ePolicy Orchestrator 4.5 Product Guide

Disable Windows updates
Disable Windows updates to ensure they do not interfere with your ePO installation or upgrade. For more information, see:http://windows.microsoft.com/en-US/windows-vista/Turn-automatic-updating-on-or-off
 

Disable third-party software
Disable any software that automatically restarts services on your ePO server.

Ensure correct account permissions
The account used to access the SQL server must have the following permissions:


Default database must be Master
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Expand Security, Logins. 
  3. Right-click the account and select Properties.
  4. Ensure the default database is set to master.
  5. Expand User Mapping and ensure that account has dbo in the schema for the database.
This account must the db_owner in the database security properties:
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Expand Databases, your ePO database, Security, Users.
  3. Right-click the dbo account and select Properties. 
  4. Ensure that account has dbo in the Default schema for the database.
If you use an NT account to authenticate to the ePO database, ensure that account has Local Admin rights on the ePO server.

See KB75766 for detailed information on the required SQL permissions.

 
 
Ensure Auto Close is set to False for the ePO database
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Right-click the ePO database and select Properties.
  3. Click Options and ensure Auto Close is set to False. If not, click Auto Close, select False, and click OK.
 
Export your current policies
Use the Export function in ePO to back up your existing policies. See the ePO Product Guide for detailed information about exporting policies.
 

Ensure the SQL browser service is running
  1. Click Start, Run, type services.msc and click OK.
  2. Locate the SQL Server Browser service and ensure that it is started and running.
  3. If not, right-click the SQL Server Browser service and select Start.
Ensure SQL Force Encryption is disabled in SQL server environments, if it is enabled.
  1. Click Start, All Programs, Configuration Tools, SQL Server Configuration Manager. 
  2. Right-click Protocols for <instance_name> (MSSQLSERVER by default) under SQL Server Network Configuration and click Properties.
  3. Click the drop-down for Force Encryption and select No.
  4. Click OK.

Enable TCP/IP on the ePO server

  1. Click Start, Run, type Cliconfg and click OK.
  2. Ensure the TCP/IP protocol is Enabled and at the top of the Enabled protocols by order list.

Verify the correct DB collation is set on the SQL server
ePO uses SQL_Latin1_General_CP1_CI_AS as the default collation for the database when an upgrade or fresh installation of ePO is performed.
To verify collation in SQL Server:
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Log on to the server using Windows Authentication or SQL Server Authentication, as applicable.
  3. In Object Explorer, expand Databases and locate the ePO database.
  4. Right-click the ePO database and select Properties.
  5. Review the Collation field in the General page.
See KB73717 for detailed information on supported collation types for ePO. 

In a pure IPv6 environment, ensure that only IPv6 is enabled on the SQL server that hosts the ePO database
See the following article for detailed information:

KB66179 – ePO 4.5 fails to install on Windows 2008 server with IPv6 enabled when remote SQL 2005 server has both IPv4 and IPv6 enabled
 
 

Ensure that the ePO admin and SQL account usernames and passwords meet the criteria described in KB66286. 
 
 
 
 

Related Information

PD24349 – ePolicy Orchestrator 5.0 Installation Guide
 

Rate this Page

Please take a moment to complete this form to help us better serve you.

Leave a comment