logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: Getting System Error Event "MESSAGE WITH STRING ID 616 HAS INVALID SUBTYPE(1022)"

App Control: Getting System Error Event "MESSAGE WITH STRING ID 616 HAS INVALID SUBTYPE(1022)"

Environment

  • App Control Server: 8.1.4-8.1.6

Symptoms

  • Getting System error event "MESSAGE WITH STRING ID 616 HAS INVALID SUBTYPE(1022)".
  • Error emanating from endpoint that is on a higher version of App Control than the App Control server.

Cause

Pertains to MSI files where the agent found data appended after the signature - the agent encountered a somewhat unexpected formatted MSI.

Resolution

Upgrade App Control Server to 8.1.8 or higher.

Additional Notes

Please collect agent logs and contact Support to determine which MSI file(s) triggered the event, if desired.

Related Content


Labels (1)
Labels:
Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎12-11-2020
Views:
307
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.