[Macpartners] Can't install McAfee on OS 10.8

[Justin Fleming]

Good afternoon,

I'm pleased to report that McAfee has resolved this installation issue and has provided an updated binary of McAfee Security 1.2 for Mac (for more information, please see McAfee's documentation here<https://community.mcafee.com/docs/DOC-4688>).  You can download this updated binary now from the IS&T Software Grid: http://ist.mit.edu/mcafee-security/1x/mac

Please let us know if you have any questions or issues with this product going forward.

Thanks,
~ Justin
__

Justin Fleming
Mac Platform Coordinator
Software Release Team
Systems Engineering, IS&T, MIT
jtflem at mit.edu<mailto:jtflem at mit.edu> | 617.253.0157 | W92-229A

Important: IS&T staff will never ask you for your password, nor will MIT send you email requesting your password information.  Please ignore any email messages that claim to require you to provide such information.

On Feb 14, 2013, at 6:04 PM, Andrew Munchbach <amunch at mit.edu<mailto:amunch at mit.edu>> wrote:

Good Evening,

Justin F. is currently on a train, but he asked me to pass along the following links so everyone has the most up-to-date information.  McAfee has acknowledging the installation issue, confirmed that it is indeed the revoked signing certificate at fault, and promised an updated binary in the near future.

While there is a workaround, McAfee's recommendation is: "to resume product deployments once the appropriate [updated] packages are available."  IS&T also recommends that Mac users *not* leverage the workaround as it could leave your system vulnerable to malicious software signed by a revoked certificates.

https://community.mcafee.com/docs/DOC-4688
https://kc.mcafee.com/corporate/index?page=content&id=KB77390

Regards,
Andrew
--
Andrew Munchbach
IT Security Analyst
Massachusetts Institute of Technology
IS&T | Operations & Infrastructure | IT Security Services
amunch at mit.edu
+1 (617) 324-4571

http://ist.mit.edu/secure

On Feb 14, 2013, at 4:22 PM, Justin Fleming <jtflem at mit.edu> wrote:

McAfee's accidental revocation of their code-signing key and the invalidation of their signing certificate (described in the article linked by Andrew) is responsible for this message and for blocking the installation of McAfee Security on OS X.  I've been able to replicate the issue on two Macs running OS X 10.8, and temporarily disabling Mountain Lion's Gatekeeper security feature does not allow the installation to proceed.

IS&T is investigating this issue and McAfee engineers are reportedly working to re-sign all of their Mac applications with a new certificate.  As soon as an updated McAfee Security installer is available, we will replace the current installer distributed on IS&T's Software Grid and notify this list.  IS&T will keep the following page updated with the latest information as we have it: http://kb.mit.edu/confluence/x/7qgBCQ

Thanks,
~ Justin
__

Justin Fleming
Mac Platform Coordinator
Software Release Team
Systems Engineering, IS&T, MIT
jtflem at mit.edu | 617.253.0157 | W92-229A

Important: IS&T staff will never ask you for your password, nor will MIT send you email requesting your password information.  Please ignore any email messages that claim to require you to provide such information.

On Feb 14, 2013, at 3:23 PM, Andrew Munchbach <amunch at MIT.EDU>
wrote:

Not sure if this is related... but...

McAfee accidentally revoked the certificate they use to sign software:

http://arstechnica.com/security/2013/02/a-world-of-hurt-after-mcafee-mistakenly-revokes-key-for-signing-mac-apps/

Andrew

On Feb 14, 2013, at 2:58 PM, David James Broderick <djbroder at mit.edu> wrote:

I get a very strange message (see attached) when trying to install MacAfee on a couple of new Macs. I tried installing from a thumb drive which had downloaded the app on another computer, just to see if the message would be different, but same result.

Also, the message refers to a time when the computer probably did not exist. It only shipped in December.

I have never seen a message exhorting me to move an app to the trash.


David J. Broderick
djbroder at mit.edu
Audio Visual Project Technician
MIT AV 617 253 2808
FAX 617 253 5945
http://web.mit.edu/djbroder

<NoMcAfee.tiff>





-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/macpartners/attachments/20130219/b6660273/attachment.htm