Download Framepkg.exe from the ePolicy Orchestrator server on a shared folder on a network
server, where all systems have read permissions.

Execute the following command:

Framepkg.exe /gengpomsi /SiteInfo=<sharedpath>\SiteList.xml /
FrmInstLogLoc=<localtempDir>\<filename>.log

The following files are extracted to your local drive.

MFEagent.msi
agentfipsmode
Sitelist.xml
sr2048pubkey.bin
srpubkey.bin
req2048seckey.bin
reqseckey.bin

Copy the extracted files to a shared UNC location specified in siteinfo path.

Create a new Group Policy Object.

Click Computer Configuration -> Policies -> Software Settings.

Right-click Software installation, then click New -> Package.

When prompted, browse to the shared UNC path, then select MFEAgent.msi.

Select the Deployment Method

McAfee Agent Option:

<Installation Path>\Common Framework\CmdAgent.exe /[P/E/C/F]

P - Collect and send properties to the server
E - Enforce policies locally
C - Check for new polices
F - Forward events to the server
S - Show agent monitor GUI
? - Help

Remove McAfee Agent:

"c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall 

or

"<Installation Path>\Common Framework\frminst.exe" /forceuninstall

Prepare a Image with McAfee Agent version 5.X

Open Command line with administrator permission
​Go to the McAfee Agent Installation path
Run the following command: ​maconfig -enforce -noguid

Prepare a Image with McAfee Agent version 4.X
For Image system you will need to remove Keys from the registry

-Open The registry, Start | Run
-Write "regedit"
- go to
32bit
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent\

64 bit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator\Agent\


-Remove/Delete the Keys:
AgentGUID (McAfee Agent Version 4.x,)
MacAddress (McAfee Agent Version 4.x)


Remove the GUID is with a command
run the agent installation "framepkg.exe" for installing the agent on the system

From command line run: "maconfig -enforce -noguid"

Important Note: McAfee Agent 5.x as a self protection Enable by default, to remove the GUID you will need to run the command or to after installing the McAfee Agent 5.x reboot the system to safe mode and only then you can stop the services and delete the registry key manually.

When Starting the Upgrade from ePO version 4.X or 5.X receiveing an error start with "This ePolicy Orchestrator server has more than 10,000 unprocessed events"

Solution:

Stop the Event Parser service

Go to the folder: %ProgramFiles(x86)%\McAfee\ePolicy Orchestrator\DB\Events\

Delete all the files inside and all the file inside the folders: Debug, Unknown.

Start the Event Parser service.

You ready to go (and it will start faster)