Transcript
Installation Guide
McAfee Endpoint Suites
Introduction
The installer for McAfee Endpoint Suites provides an easy method for the installation of McAfee
®
ePolicy Orchestrator
®
(McAfee ePO
™
) and SQL Server Express. It also provides easy deployment of
McAfee managed products.
• Simple and automated installation — Through a single installer, you can install McAfee ePO,
SQL Server Express, and check in the packages and extensions for many McAfee products.
• Seven available suites — You can download the suite that suits your organization's needs. See
Product suites.
• Automatic check-in of product components — The installer automatically checks in the product
extensions and packages, which include custom policies, default policies, and tasks for each McAfee
managed product.
• Automatic discovery of systems — The installer has the ability to detect all systems on the local
subnet and add them to the McAfee ePO System Tree.
Deployment through the installer
The installer simplifies the setup process for McAfee ePO and McAfee products.
In traditional deployment, you must download and install McAfee ePO, download and install all McAfee
products individually, then configure policies and tasks.
Using this installer, the process involves two basic steps.
1 Download the suite .zip file to your server and unzip the package.
2 Double-click the installer to launch the wizard, then follow the prompts.
The product extensions and packages are set up on the McAfee ePO server, and are ready to be
deployed to the client systems.
Product suites
These are the seven software suites.
• EPS — Endpoint Protection Suite
• EPA — Endpoint Protection Advanced Suite
1
• CEB — Complete Endpoint Protection Business Suite
• CEE — Complete Endpoint Protection Enterprise Suite
• DST — Datacenter Suite
• CDB — Complete Data Protection Suite
• CDA — Complete Data Protection Advanced Suite
Each suite contains McAfee ePO and a set of McAfee products. Select the suite that is best suited for
your organization.
Table 1 Product suites
EPS EPA CEB CEE DST CDB CDA McAfee product Version
Endpoint security
McAfee
®
VirusScan
®
Enterprise for Windows 8.8.3
McAfee
®
Endpoint Protection for Mac 2.1.0
McAfee
®
VirusScan
®
Enterprise for Linux 1.9.0
McAfee
®
VirusScan
®
Enterprise for Storage 1.0.2
McAfee
®
Security for Microsoft SharePoint 3.0.0
McAfee
®
Application Control for Desktop 6.1.1
McAfee
®
Application Control for Servers 6.1.1
McAfee
®
Deep Defender
™
1.6.0
McAfee
®
Host Intrusion Prevention for Desktops
(Firewall only)
8.0.3
McAfee
®
Host Intrusion Prevention for Desktops
(Intrusion Prevention, App Blocking, and Access
Protection)
8.0.3
McAfee
®
MOVE AntiVirus Multi-Platform 2.6.2
McAfee
®
MOVE AntiVirus Agentless 3.0.0
McAfee MOVE AntiVirus Scheduler 2.5.1
Web and messaging security
McAfee
®
SiteAdvisor
®
Enterprise 3.5.2
McAfee
®
Web Filtering for Endpoint 3.5.2
McAfee
®
Security for Microsoft Exchange 8.0.0
McAfee
®
Quarantine Manager 7.0.1
Mobile device security and management
McAfee
®
Enterprise Mobility Management 11.0.0
Data protection
McAfee Data Loss Prevention Endpoint 9.3.0
McAfee
®
Device Control 9.3.0
McAfee
®
Endpoint Encryption for PC 7.0.2
McAfee
®
Endpoint Encryption for Files and Folders 4.2.0
McAfee
®
Management of Native Encryption (MNE) 1.0.0
Management and deployment
McAfee ePolicy Orchestrator 5.0.1
2
Table 1 Product suites (continued)
EPS EPA CEB CEE DST CDB CDA McAfee product Version
McAfee
®
Agent 4.8.0
Real Time for ePolicy Orchestrator
®
1.0.1
McAfee
®
ePO Deep Command Discovery 2.0.0
McAfee
®
ePO Deep Command 2.0.0
Data Center Connector for vSphere 3.0.0
Data Center Connector for AWS 3.0.0
Risk and compliance management
McAfee
®
Risk Advisor 2.7.2
McAfee
®
Policy Auditor for Desktops 6.2.0
The installer installs and configures the components in your suite. However, you must verify the
interoperability and compatibility of these products in your environment.
Installation
Install McAfee ePO and the McAfee products it will manage.
Pre-installation
Make sure that your server is ready and meets all requirements. This information can help you
prepare for the installation.
Package suite .zip files
The software package contains the files necessary to install and set up the McAfee ePO software, and
the McAfee products to be managed.
Package Content
EPS.zip McAfee ePO
EPS suite products
EPA.zip McAfee ePO
EPA suite products
CEB.zip McAfee ePO
CEB suite products
CEE.zip McAfee ePO
CEE suite products
Datacenter.zip McAfee ePO
Data center suite products
Encryption_CDA.zip McAfee ePO
CDA suite products
Encryption_CDB.zip McAfee ePO
CDB suite products
3
System requirements
Make sure that your server meets these requirements.
These are the minimum requirements for the installer to install the components of your suite. You can
see detailed information about requirements for McAfee ePO in the McAfee ePO installation guide and
the best practices guide. You can also see the product-specific requirements in each product's
documentation.
Component Minimum requirement
Operating system
• Microsoft Windows Server 2008, Service Pack 2 or later (64-bit)
• Microsoft Windows Server 2012 (64-bit)
Microsoft .NET Framework Microsoft .NET Framework 3.5, Service Pack 1
RAM Minimum of 4 GB
Free disk space 10 GB of free space on the installation drive
8.3 Naming Convention 8.3 Naming Convention must be enabled.
Network Network connection is required.
Ports Default ports are 80, 443, 1433, 8081, 8082, 8443, 8444, and 8731.
These ports can be changed during installation if they are already in use.
Virtualization The installer supports these virtual infrastructure software packages:
• VMware ESX 5.0
• VMware ESX 5.1
Database SQL Server Express 2008 R2 Service Pack 1 is supplied. You can also use
an existing SQL Server. See Supported SQL Servers.
Network share/mapped
drive
You cannot install the software packages from a network share or a
mapped drive.
Supported SQL Servers
You can use an existing SQL Server with McAfee ePO. These are the supported SQL databases.
Version Edition
Microsoft SQL Server 2008 R2, Service Pack 1 or later (32‑ and 64‑bit) Enterprise
Express
Standard
Work group
Microsoft SQL Server 2012 (32‑ and 64‑bit) Enterprise
Express
Standard
Business Intelligence Edition
Install the software
Install the components in your suite by following this simple procedure.
Before you begin
You must install Microsoft .NET Framework 3.5 Service Pack 1 manually.
4
Task
1 Download and extract the installer archive for your suite from the McAfee download site.
A folder directory structure is created. It has an EASI.exe executable and folders that the
application uses to perform the automated installation and configuration. For details, see Folders in
the software package.
2 Navigate to and double‑click EASI.exe to launch the installer.
3 In the welcome screen:
a Enter the details for the user.
• User name — Specify the administrator name for McAfee ePO.
The installer pre-populates this field with value Admin. It is recommended that you do not
change this value.
• Password — Specify the password for McAfee ePO.
The password must be at least 8 characters, have at least one uppercase letter, at least one
special character, and at least one digit.
• Confirm password — Re-enter the password for McAfee ePO.
• The user name and password you enter here are set as the user credentials for
McAfee ePO and the database.
• The password you specify here is also set as the keystore encryption passphrase
for the disaster recovery feature of McAfee ePO. For more information on the
disaster recovery feature and the keystore encryption passphrase, see the product
guide of McAfee ePO.
b Select Automatic discovery of systems to add all systems in the local subnet to the McAfee ePO
System Tree.
c Deselect Allow McAfee to collect system and software telemetry data if you don't want McAfee to collect
system and software data.
d Select the language, accept the terms in the license agreement, then click Next.
5
4 Verify the system requirements listed on the screen. For details, see Prerequisite details.
Icon Status Description
Passed The system requirement is met.
Warning The system requirement needs further review but allows the installation to
continue.
Information Useful system information.
Failed The system requirement has failed and must be corrected before the
installation can continue.
Table 2 Option definitions — System requirements
Option Definition
Item Displays the prerequisites of the installer.
Information Displays some useful system information.
Status Displays the status of the installed component. For example, Passed or Failed.
Message Specifies more information about the failed installation component.
Configure Ports Provides an option to configure ports in case of conflicts.
This option is available on the left pane, only if the default ports used by the
installer are already in use by another application. To resolve port conflicts, click
Configure Ports to open the Configure Ports screen.
Please Select Drive Provides an option to select a drive for McAfee ePO installation.
Back Returns to the previous screen.
Retry Performs the prerequisite check again and continue the installation.
This option is available if any of the prerequisites are not met. Correct the failed
prerequisites and try again.
Next Continues with the installation.
5 To resolve any port conflicts, click Configure Ports and click Save.
The ports marked in red are being used by other applications. Change them to continue the
installation. See Default port settings for the default ports used by the application.
6 Select the drive of the installation, then click Next.
7 Select a database and configure as needed.
• Install Microsoft SQL Express — Installs Microsoft SQL Server Express 2008 R2 Service Pack 1.
• Use Existing Microsoft SQL Server — Connects to an existing database server on your network.
1 Select a database server from drop-down list. If it is not listed, you can enter the server
manually.
2 Specify the authentication mode by selecting Windows authentication or SQL authentication.
6
Windows
authentication
1 Select a domain form the drop-down list, if not listed then type the
domain of the user account you're going to use to access the SQL Server.
2 Type the user name and password. If you are using a previously installed
SQL Server, make sure that your user account has sufficient privileges to
access the database.
SQL
authentication
• Type the user name and password for your SQL Server. Make sure that the
credentials you provide represent an existing user on the SQL Server with
appropriate rights.
The Domain menu is grayed out when using SQL authentication.
You might need to type the SQL Server TCP port to use for communication between your McAfee ePO
server and database server. Default port for this communication is 1433.
8 Click Install.
The installer tries to connect to the database with the credentials you provided. If the connection is
successful, the installation begins. If the connection fails, you are prompted to provide the correct
details. Verify the connectivity between the McAfee ePO server and the database server.
9 Verify that the Message column shows this message for all the components: The operation completed
successfully.
If the installation is unsuccessful, check the logs in the %ALLUSERSPROFILE%\McAfee\EASI folder
with the file name Install.xxxxx.log for failures.
10 Click Finish.
You have now successfully installed all components of your suite.
Verify your installation
Verify that all the components of your suite are installed correctly.
To do this... Perform these steps...
Log on to the
McAfee ePO
server
After the installation, Log On to ePolicy Orchestrator screen appears.
• Log on to the server with the credentials you provided at the beginning of the
installation.
You can also access the McAfee ePO server by double-clicking on your desktop,
or browse to the server from a remote web console (https://
:).
Verify the
automatic
discovery of
systems
After the installation, you can see all the systems in your local subnet on your
System Tree, if you enabled the automatic discovery of systems.
1 In the McAfee ePO console, click Menu | Systems | System Tree, then verify that all the
systems on the subnet are added to the System Tree.
All the systems are added to the System Tree in unmanaged mode if you select
Enable automatic discovery of systems during installation.
2 Deploy agents to these systems to manage them. For instructions, see the
product documentation for your version of McAfee ePO.
7
To do this... Perform these steps...
Verify the
packages
• On the McAfee ePO console, click Menu | Software | Master Repository to view the
packages.
If the installation was successful, you see the products from your software package
displayed under the Master Repository.
Verify the
extensions
• On the McAfee ePO console, click Menu | Software | Extensions to view extensions.
If the installation was successful, you see the extensions for all the installed
products from your suite checked in to your McAfee ePO server.
Verify custom
policies and
tasks
The installer contains some custom policies and predefined tasks for the McAfee
products that you installed. You can see these custom polices and tasks on your
McAfee ePO server.
1 To view the custom policies, click Menu | Policy | Policy Catalog.
2 From the Product list, select the McAfee product to view its policies.
3 Click Menu | Policy | Client Task Catalog to view tasks.
4 Select the task type in the left pane to view custom tasks.
Additional information
This information can help you during the installation process. Also included is information about the
optional products that you can install after setting up your McAfee ePO server.
Optional products to install
After the installation is complete for the components in your suite, you can manually install more
McAfee products that are a part of your suite.
• You can find these files in the postInstall folder of your software package.
• The postInstall folder includes extensions, and packages of additional McAfee products based on
your suite.
• For instructions about setting up and using these McAfee products, see the setup guides
in the folder Manuals in your software package. Every McAfee product has a
comprehensive set of documentation. You can see the manuals under Product Documentation
on the McAfee customer portal at https://mysupport.mcafee.com/.
• We recommend that you install McAfee Enterprise Mobility Management, Real Time for
McAfee ePO, and McAfee ePO on three different servers.
Table 3 Components in postInstall
Suite
category
Software package Components in the postInstall
folder
Description
EPS EPS.zip Real Time for McAfee ePO
McAfee Security for Microsoft
Exchange (MSME) software
extensions per supported
language
The installer checks in the
software extension based
on the language selected.
The other language
extensions are placed here.
8
Table 3 Components in postInstall (continued)
Suite
category
Software package Components in the postInstall
folder
Description
License key for McAfee Device
Control
EPA EPA.zip Real Time for McAfee ePO
McAfee Security for Microsoft
Exchange (MSME) software
extensions per supported
language
The installer checks in the
software extension based
on the language selected.
The other language
extensions are placed here.
License key for McAfee Device
Control
CEB CEB.zip McAfee Enterprise Mobility
Management
Real Time for McAfee ePO
McAfee Security for Microsoft
SharePoint extensions per
supported language
The installer checks in the
software extension based
on the language selected.
The other language
extensions are placed here.
McAfee Security for Microsoft
Exchange (MSME) software
extensions per supported
language
The installer checks in the
software extension based
on the language selected.
The other language
extensions are placed here.
License key for McAfee Device
Control
McAfee VirusScan Enterprise for
Storage
McAfee VirusScan
Enterprise for Storage
version 1.0.3 is in post
install folder.
CEE CEE.zip McAfee Enterprise Mobility
Management
McAfee Risk Advisor
Real Time for McAfee ePO
McAfee Security for Microsoft
Exchange (MSME) software
extensions per supported
language
The installer checks in the
software extension based
on the language selected.
The other language
extensions are placed here.
License key for McAfee Device
Control
License key for McAfee Application
Control - Desktop
DST Datacenter.zip License key for McAfee Application
Control - Servers
Third-party license key for McAfee
MOVE AntiVirus Agentless
CDB Encryption_CDB.zip McAfee KVM Viewer
9
Table 3 Components in postInstall (continued)
Suite
category
Software package Components in the postInstall
folder
Description
CDA Encryption_CDA.zip License key for McAfee Data Loss
Prevention Endpoint
McAfee KVM Viewer
Folders in the software package
These are the folders in the software package that the application uses to perform the automated
installation and configuration.
Folder name Description
ePOSetup McAfee ePO setup files.
extensions McAfee product extensions.
installers Additional components installed by the installer.
Manuals The installation guide, setup guide, and release notes.
packages McAfee product packages.
policies Custom policies for McAfee products.
postInstall More McAfee products, which you can install manually.
serverTasks More background server tasks that run on your McAfee ePO server on a schedule.
sysTree A sample System Tree structure for McAfee ePO.
tags Tags that are assigned to systems.
tasks Custom tasks for McAfee products.
Utilities Utilities for SQL Server Express database maintenance.
EASI.exe The executable file that launches the installation process.
Prerequisite details
This information can help you resolve failed prerequisites during the installation.
Prerequisites Details
Logging Specifies the location of the logs created during installation.
Computer Name Specifies the name of the computer.
Operating System Specifies the operating system of the server. The installer works on the
supported operating systems listed in System requirements. If the installer is
executed on any other operating system, this prerequisite fails.
ePolicy Orchestrator The installer sets up a new McAfee ePO server. It does not support the upgrade
of an existing McAfee ePO server. If ePolicy Orchestrator is already present on
the system, this prerequisite fails.
.NET Framework 3.5 SP1 Specifies the .NET Framework present on the system.
Current User Specifies logged-on user name.
User Access Control Specifies if the user access is enabled or disabled.
If User Access Control is enabled, the installer must be run as an administrator.
To do this, right-click EASI.exe and select Run as an Administrator.
10
Prerequisites Details
8dot3NameCreation Specifies if the 8.3 Naming Convention is enabled or disabled. Your operating
system must allow creating short path names.
To enable the 8.3 Naming Convention, change the
NtfsDisable8dot3NameCreation key to 0 in the path [HKEY_LOCAL_MACHINE
\SYSTEM\CurrentControlSet\Control\FileSystem
\NtfsDisable8dot3NameCreation] and restart the system. See the KB article
for more details. https://kc.mcafee.com/corporate/index?
page=content&id=kb51431
Total Memory Specifies the physical memory space of the system.
Free Disk Space Specifies the free disk space on the drive.
Host Name Specifies the host name of the system.
Network Availability Specifies if the network is available.
We recommend using static IP. If DHCP is enabled, the IP address might change
once the system restarts. This results in McAfee ePO client-server communication
problems.
Listening Ports Specifies the default ports 80, 443, 1433, 8081, 8443, 8444, and 8731 which
will be assigned to McAfee ePO.
If there is a port conflict, you can resolve it with the Configure Ports option.
Windows Firewall Specifies if the Windows Firewall feature is enabled or disabled.
We recommend that you turn off Windows Firewall, because it might block the
McAfee ePO client-server communication.
Local Area Connection Specifies the connection information for the local area network of the system.
Default ports
These are the default port settings used by the installer.
Setting name Port number Description
EASIAgentPort 80 Agent-server communication port.
EASIAgentSecurePort 443 Agent-server secure communication port.
EASIDatabasePort 1433 SQL Server TCP port.
EASIAgentWakeupPort 8081 Agent wake-up communication port.
EASIAgentBroadcastPort 8082 Agent broadcast communication port.
EASITomcatSecurePort 8443 Console-to-application server communication port.
EASITomcatAuthPort 8444 Client-to-server authenticated communication port.
EASIWCFServerPort 8731 Port number used by McAfee Device control.
11
Frequently asked questions
These are answers to some common situations that you might encounter while installing or using the
product.
When trying to install EASI.exe, I get error Endpoint Advanced Suite Installer has stopped working. What
can I do?
Install .NET framework 3.5 on the system, then try to execute the installer again.
How can McAfee ePO be upgraded or uninstalled using this installer?
This installer cannot be used to upgrade or to remove McAfee ePO. It is meant only for setting
up the McAfee ePO server for the first time. However, you can log on to the McAfee ePO server
to upgrade the McAfee products and their policies.
Can we use the installer for trial versions of the products?
The installer installs McAfee ePO in Evaluation mode, which works for 90 days. After this period,
you must enter a license key in the McAfee ePO Login screen to continue using it.
Is it possible to check in only product packages and extensions without installing McAfee
ePO?
No. The installer does not allow checking in product policies and extensions to an existing
McAfee ePO server. It is always done during the installation of the McAfee ePO server.
What is the default user created for the SQL Express database?
For the Microsoft SQL Server Express database, a database user named sa is created with the
password you specified during installation.
McAfee ePO installation fails when the SQL Server Browser service is not running. What
should I do?
Start the SQL Server Browser service and execute the installer again.
What should I do if the installation fails?
Check the logs in the %ALLUSERSPROFILE%\McAfee\EASI folder. The log files are:
• Install.xxxxx.log (one file per run)
• ePO.setup.log
Check for McAfeeScanLine.txt log file in sysTree folder.
McAfeeScanLine.txt is generated if you select the option Enable automatic discovery of systems in the
installer.
If the installer wizard does not appear when I run EASI.exe, what should I do?
1 Check the event viewer from Start | Run | eventvwr.
2 See the General and Details tabs for the error message.
Where can I find a list of known issues?
See this article in McAfee KnowledgeBase https://kc.mcafee.com/corporate/index?
page=content&id=KB79678.
12
Copyright © 2013 McAfee, Inc. Do not copy without permission.
McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and
other countries. Other names and brands may be claimed as the property of others.
0-00 13
