The installation failure is because OfficeScan installs a certificate on the agent side (ofcsslagent) that SCCM (Microsoft Configuration Manager) considers to be invalid.

It is suggested to check the following SCCM settings:

1. In the Configuration Manager console of the primary site server, navigate to System CenterConfiguration Manager / Site Database / Site Management / <site code> - <site name> / Site Settings / Site Systems / <site system name>.
2. In the Details pane, right-click ConfigMgr site system and click Properties.
3. Go to the Client Computer Communication tab.
4. See if "Use PKI client certificate..." is ticked or not. It is suggested to uncheck this option.
5. See If there were any Trusted Root Certificate Authorities specified. If there are, it is advised to configure it as "None specified".

   

Check the initial OfficeScan agent package deployment and see if it can be successfully deployed.

If the agent installation via SCCM still fails, you can install using one of these methods:

• Deploying the OfficeScan (OSCE) agent using Group Policy Object (GPO)
• Installing the OfficeScan agent using Vulnerability Scanner (TMVS)
• Installing agents using Remote Install from the web console in OfficeScan