How to change McAfee Agent management modes

McAfee Agent can be toggled between unmanaged mode and managed mode.

Some of the more recent McAfee products that use AutoUpdate, such as McAfee Endpoint Security, are installed with McAfee Agent in updater mode. To start managing these products with McAfee ePO, you can enable McAfee Agent that is already on the system by changing its management mode.

Changing the existing McAfee Agent on each system to managed mode saves significant network bandwidth over deploying McAfee Agent installation package. But, existing McAfee products were probably installed with an older version of McAfee Agent, which is not automatically upgraded to the latest version on McAfee ePO.

In some situations, you might want to change a system that is managed by McAfee ePO to updater (unmanaged) mode. Information is provided for changing from managed mode to unmanaged mode.

Before changing the McAfee Agent mode, consider the following:

  • By default, FrmInst.exe is installed on client system in this location:
    • Windows (32-bit) – C:\Program Files\McAfee\Agent.
    • Windows (64-bit) – C:\Program Files\McAfee\Agent\x86.
  • Do not change the McAfee Agent installation folder without removing and reinstalling McAfee Agent. The agent that you enable might be in a different folder than the agent that you deploy in your network by another method.
  • Assigning sorting filters or domain names to specific System Tree segments saves time. Without such designations, systems are placed in Lost & Found and you must move them from that location.
  • Export agentfipsmode file from this location with the mentioned files and rename the reqseckey.bin and srpubkey.bin to req2048seckey.bin and sr2048pubkey.bin respectively.
    • Windows (32-bit) – C:\Program Files\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\
    • Windows (64-bit) – C:\Program Files (x86)\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\