Change from unmanaged to managed mode on Windows systems

Change the agent from unmanaged mode to managed mode to connect and communicate with ePO - On-prem.

On Windows systems, you have three methods to change the management mode of the agent:

Note

Only remote provisioning method is available on McAfee ePO Cloud to change the management mode of the agent.

Use the installer package Framepkg
Send the installer file Framepkg.exe from ePO - On-prem to the unmanaged system, then run it on the system from an administrator account.

Locally provision with maconfig

Send Sitelist.xml, srpubkey.bin, reqseckey.bin, req2048seckey.bin, and sr2048pubkey.bin from ePO - On-prem to the unmanaged system.

Run one of these on the target system (requires administrator rights).

Using frminst

32-bit Windows	`C:\Program Files\McAfee\Agent\frminst.exe /install=agent /siteinfo =<full path>\Sitelist.xml`
64-bit Windows	`C:\Program Files\McAfee\Agent\x86\frminst.exe /install=agent /siteinfo =<full path>\Sitelist.xml`

Locally provisioning using maconfig
```
maconfig.exe -provision -managed -dir "directory location where the sitelist.xml and security keys were exported"
```
Sitelist.xml file is located here: C:\Program Files (x86)\Trellix\ePolicy Orchestrator\DB

Important

maconfig.exe is changed from a console application to Windows application. To view console logs, use maconfigCmd.exe instead of maconfig.exe for Trellix Agent version 5.8.1 and above.

Remotely provision with maconfig

Run the following command on the target system.

maconfig.exe -provision -managed -auto -dir "temp location to copy keys"
 -epo ePOServerMachine [-user ePO-User-name] [-password epo-admin-password]

For example,

maconfig -provision -managed -auto -dir "C:\Windows\Temp"
 -epo ePOServerMachine [-user admin] [password password123]