Ads

Friday, 10 November 2017

McAfee KB84419: Windows 10 compatibility with McAfee products

McAfee KB84419: Windows 10 compatibility with McAfee products

Environment

Multiple McAfee business and enterprise products

Microsoft Windows 10 (version 1507)
Microsoft Windows 10 (version 1511) - November Update (Threshold 2, first update)
Microsoft Windows 10 (version 1607) - Anniversary Update (Redstone 1 [RS1], second update)
Microsoft Windows 10 (version 1703) - Creators Update (Redstone 2 [RS2], third update)
Microsoft Windows 10 (version 1709) - Fall Creators Update (Redstone 3 [RS3], fourth update)

NOTE: This article applies only to McAfee business and enterprise products. If you need information or support for McAfee consumer or small business products, visit https://service.mcafee.com.

Summary

McAfee is committed to supporting the Microsoft release cadence for Windows 10 and is working closely with Microsoft to ensure that McAfee security software and hardware products are fully compatible with Windows 10 endpoints.

To ensure release quality, all new releases that Microsoft publishes for Windows 10 require full validation by the individual product teams. The McAfee goal is to add zero-day support for all Windows 10 releases over time for those products that do not currently offer this cadence.

NOTE: Late-breaking changes implemented by Microsoft to a release, or any unresolved compatibility issues raised by McAfee with Microsoft around a scheduled release, could lead to schedule changes that will be documented and updated in this article.

Recent updates to this article
DateComments
Oct 30, 2017Updated products RTS information for Windows 10 Fall Creators Update (RS3) support.
Oct 25, 2017Update to Application and Change Control for Fall Creators Update, to reflect support included with version 7.0.1-462 (HF6).
Oct 23, 2017Updated details about McAfee product support for Microsoft Windows 10 (version 1709) - Fall Creators Update. Changed Management of Native Encryption 4.1.1 to 4.1.2 (Q4 2017) in the Windows 10 (Version 1709) Fall Creators Update column.
Oct 17, 2017Updated details about McAfee product support for Microsoft Windows 10 (version 1709) - Fall Creators Update. Moved content for Windows 10 versions 1507 and 1511 to a second table in the Related Information section.
Oct 10, 2017Corrected a typo in the Security Management Products section (Windows 10 Fall Creators Update column) for McAfee Agent (MA). MA 5.0.6 was included twice. Changed to MA 5.0.5 and 5.0.6.
Sep 25, 2017Added to footnote 2 for support with Drive Encryption. 

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged in to subscribe.


NOTES:
  • Future release dates are subject to change.
    NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision.
  • RTW = Released To World
  • RTS = Released To Support, also called Managed Release. Contact your Technical Account Manager (TAM) or Support Account Manager (SAM) to participate in a Managed Release program.
  • For details about Service Packs, patches, hotfixes, maintenance releases, and the patch release cycle, see KB51560.
  • For details about a support statement for verifying and validating Microsoft patches, see KB50473.
Compatibility with Windows 10 Versions 1607, 1703, and 1709
McAfee ProductsWindows 10 
(Version 1607)

Anniversary Update4		Windows 10 
(Version 1703)

Creators Update 5
Windows 10
(Version 1709)
Fall Creators Update

McAfee Products
Status RTS
Minimum Supported McAfee Product Version
Endpoint Protection Products 1
Active Response1.1.0.2122.0
2.01		2.0.1
Application and Change Control7.0.18.0.x8.0.x
Data Loss Prevention Endpoint (DLP Endpoint)11.0
10.0.100
9.4.230
9.3.630		11.0
10.0.250
9.4.300		11.0.130 (RTS)8
10.0.330 (RTS)8
Endpoint Security (ENS)10.2
10.1.2		10.2.1
10.5.1		10.2.2 (RTS)8
10.5.3 (RTS)8
ENS - Advanced Threat Protection (ATP)10.5.110.5.210.5.3 (RTS)8
Host Intrusion Prevention (Host IPS)8.0 Patch 88.0 Patch 98.0 Patch 10 (RTS)8
SiteAdvisor Enterprise (SAE)3.5 Patch 53.5 Patch 53.5 Patch 5
Threat Intelligence for Endpoint Security Client10.1 Patch 2
10.2		10.2.210.2.3
Threat Intelligence Exchange (TIE) Module for VSE1.0.21.0.2n/a
VirusScan Command Line Scanner6.1.06.1.06.1.0
VirusScan Enterprise (VSE)8.8.0 Patch 88.8 Patch 98.8 Patch 10 (RTS)8
Database Security Products
Database Activity Monitoring (Standalone Management)4.6.0 n/an/a
Database Activity Monitoring (ePO Management)5.2.0n/an/a
Vulnerability Manager for Databases (Standalone Management)4.6.0n/an/a
Vulnerability Manager for Databases (ePO Management)5.2.0n/an/a
Data Center Protection Products
Management for Optimized Virtual Environment (MOVE) Multi-platform4.0
3.6.1		4.54.6
Data Protection Products
Drive Encryption (DE) 2, 37.2.0
7.1.3 HF1148978		7.2.17.2.2 (RTS)8
File and Removable Media Protection (FRP) 35.0.1 HF1150417
5.0.2		5.0.3 65.0.4 (RTS)8
Management of Native Encryption (MNE)4.1.04.1.14.1.1
4.1.2 (RTS)8
Security Management Products
Data Exchange Layer (DXL)2.0.13.1.04.0 (RTS)8
ePO Deep Command 7Pending Updaten/an/a
McAfee Agent (MA)5.0.4
4.8.0 Patch 3		5.0.5
4.8.0 Patch 3		5.0.5
5.0.6
4.8.0 Patch 3
Policy Auditor Agent (PA)6.2.0.3096.2.26.3
Rogue System Detection5.0.45.0.55.0.5
Web Protection
McAfee Client Proxy (MCP)2.1.0.1772.32.3.2 (RTS)8
n/a = not available
HF = hotfix
TBD = To be Decided
1SaaS Endpoint Protection 6.0 does not support Microsoft Windows 10.0. If you try to install Windows 10.0 while running SaaS Endpoint Protection 6.0, it asks you to uninstall it.
If you are running SaaS Endpoint Protection 6.0, uninstall it and install ENS 10.0. ENS 10.0 Patch 1 supports Windows 10.0.
2IMPORTANT:
  • Zero-day in-place upgrade to Windows 10 is fully supported with DE 7.2.1 and later, by running setup.exe (no need for scripts or command-line arguments), when setup.exe is initiated from the Microsoft WSUS mechanism.
    • For DE 7.1.3 and 7.2.0 and later, reflect drivers parameter must be used when executing setup.exe directly.
      • For Windows Anniversary Update (Version 1607) only, see KB87909.
      • For Windows 10 Creators Update (Version 1703) and later, see KB89000. If the organization administrator runs the setup.exe directly, setup.exe must include the additional command-line options.
         
  • In-place upgrade to Windows 10 (versions 1507 and 1511) with DE 7.1 Patch 3 (7.1.3) or FRP 5.0.1 installed is supported, but requires specific steps to be taken as part of the Windows 10 upgrade for it to be successful. For details, see the required article:
    • For detailed instructions and sample scripts that can be tailored to suit the customer environment for DE, see KB84962.
    • For detailed instructions for FRP, see KB87550.
       
  • DEGO deployment to Windows 10 clients fails. This is resolved by installing DE 7.1 Patch 3 Hotfix 1087719 (build 7.1.3.554) or later. For details, see KB85514.
3For information about support for Device Guard with DE and FRP, see KB86009.
4KB87536 (Incompatibility between the Windows 10 Anniversary Update and multiple McAfee products) has been redirected to this article because KB87536 became obsolete. Windows 10 Anniversary Update now performs the needed upgrade and installation checks to ensure that no incompatible McAfee product versions can be installed or present, and blocks the upgrade if they are present.
5CAUTION: If Device Guard or Credential Guard is enabled on a Windows 10 Creators Update 64-bit system, you must ensure that Microsoft KB4016251 is installed on the system before you install McAfee products. For more information, see KB89029.
6A minimum Windows 10 Creators Update Version 1703 (OS build 15063.250) is required for support with FRP 5.0.3. For more information, see the Microsoft article KB4016240 https://support.microsoft.com/en-gb/help/4016240/windows-10-update-kb4016240
WARNING: Installation or upgrade with earlier builds of Windows 10 Creators Update fails.
7ePO Deep Command reaches End of Life (EOL) on April 10, 2018. See KB88454 for details.
8For customers who want to participate in a RTS/Managed Release program, contact your Technical Account Manager (TAM) or Support Account Manager (SAM).

NOTE: Additional information regarding Windows 10 support for McAfee products will use standard McAfee communication methods including the Support Notification Service (SNS).
To receive information about McAfee product updates, sign up for the Support Notification Service athttps://sns.secure.mcafee.com/signup_login.

Related Information

Windows 10 devices running version 1507 and 1511 will no longer receive security and quality updates. Microsoft recommends updating devices to the latest version of Windows 10.

Compatibility with Windows 10 Versions 1507 and 1511
McAfee ProductsWindows 10
(Version 1507)

Release To World		Windows 10
(Version 1511)

November Update
Minimum Supported McAfee Product Version
Endpoint Protection Products 1
Active Response1.1.0  HF1.1.0.1611.1.0  HF1.1.0.161
Application and Change Control7.07.0
Data Loss Prevention Endpoint (DLP Endpoint)11.0
10.0
9.4 Patch 1
9.3 Patch 6		11.0
10.0
9.4 Patch 1
9.3 Patch 6
Endpoint Security (ENS)10.0.1 (patch)
10.1 (major release)		10.0.1 (patch)
10.1 (major release)
ENS - Advanced Threat Protection (ATP)10.5.110.5.1
Host Intrusion Prevention (Host IPS)8.0.0 Patch 68.0.0 Patch 6
SiteAdvisor Enterprise (SAE)3.5 Patch 4 43.5 Patch 4 4
Threat Intelligence for Endpoint Security Client10.110.1
Threat Intelligence Exchange (TIE) Module for VSE1.0.11.0.1
VirusScan Command Line Scanner6.0.66.0.6
VirusScan Enterprise (VSE)8.8.0 Patch 68.8.0 Patch 6
Database Security Products
Database Activity Monitoring (Standalone Management)4.4.94.4.9
Database Activity Monitoring (ePO Management)5.1.3 Patch 25.1.3 Patch 2
Vulnerability Manager for Databases (Standalone Management)4.4.94.4.9
Vulnerability Manager for Databases (ePO Management)5.1.3 Patch 25.1.3 Patch 2
Data Center Protection Products
Management for Optimized Virtual Environment (MOVE) Multi-platform3.6.13.6.1
Data Protection Products
Drive Encryption (DE) 2, 57.1 Patch 3 (7.1.3)7.1.3
File and Removable Media Protection (FRP) 55.0.x
4.3.1 HF1062118 3		5.0.x
4.3.1 HF1062118 3
Management of Native Encryption (MNE)3.0.03.0.0
Security Management Products
Data Exchange Layer (DXL)2.0.02.0.1 Patch 1
ePO Deep Command 62.42.4
McAfee Agent (MA)5.0.2
4.8.0 Patch 3		5.0.2
4.8.0 Patch 3
Policy Auditor Agent (PA)6.2.0.3096.2.0.2309
Rogue System Detection5.0.35.0.3
Web Protection
McAfee Client Proxy (MCP)2.12.1
1SaaS Endpoint Protection 6.0 does not support Microsoft Windows 10.0. If you try to install Windows 10.0 while running SaaS Endpoint Protection 6.0, it asks you to uninstall it.
If you are running SaaS Endpoint Protection 6.0, uninstall it and install ENS 10.0. ENS 10.0 Patch 1 supports Windows 10.0.
2IMPORTANT:
  • Zero-day in-place upgrade to Windows 10 is fully supported with DE 7.2.1 and later, by running setup.exe (no need for scripts or command-line arguments), when setup.exe is initiated from the Microsoft WSUS mechanism.
    • For DE 7.1.3 and 7.2.0 and later, reflect drivers parameter must be used when executing setup.exe directly.
      • For Windows Anniversary Update (Version 1607) only, see KB87909.
      • For Windows 10 Creators Update (Version 1703) and later, see KB89000. If the organization administrator runs the setup.exe directly, setup.exe must include the additional command-line options.
         
  • In-place upgrade to Windows 10 (versions 1507 and 1511) with DE 7.1 Patch 3 (7.1.3) or FRP 5.0.1 installed is supported, but requires specific steps to be taken as part of the Windows 10 upgrade for it to be successful. For details, see the required article:
    • For detailed instructions and sample scripts that can be tailored to suit the customer environment for DE, see KB84962.
    • For detailed instructions for FRP, see KB87550.
       
  • DEGO deployment to Windows 10 clients fails. This is resolved by installing DE 7.1 Patch 3 Hotfix 1087719 (build 7.1.3.554) or later. For details, see KB85514.
3For details about FRP 4.3.1 HF1062118, see KB84829. This hotfix is available on the Product Downloads site as a separate item on the FRP 4.3.1 download page.
4SAE 3.5 Patch 4 HF1076106 adds support for Mozilla Firefox.
5For information about support for Device Guard with DE and FRP, see KB86009.
6ePO Deep Command reaches End of Life (EOL) on April 10, 2018. See KB88454 for details.

- Link:

- wong chee tat :)
Posted by at
Labels: , , , , , , ,