If OfficeScan clients have this in the event log:
The OfficeScan agent was unable to retrieve server data due to a mismatched certificate request from its managing OfficeScan server
Then you have probably reinstalled your OfficeScan server and used a different shared secret password, resulting in the certificate on the server and client to be mismatched, or you’ve pointed an OfficeScan client to a different OfficeScan server.
There are two ways to fix this. You can either reinstall OfficeScan on each agent with the certificate mismatch, or run the following command on each agent:
IpXfer_x64.exe -e OfcNTCer.dat
❗ If you are running OfficeScan XG instead of OfficeScan 11, run this command: IpXfer_x64.exe -e OfcNTCer.dat -pwd [unload password]
The IpXfer_x64.exe program can be found in \\OfficeScanServerName\ofcscan\Admin\Utility\IpXfer\.
The OfcNTCer.dat file (which contains the correct server certificate) can be found in \\OfficeScanServerName\ofcscan\Pccnt\Common\.
After running this command (which has no GUI), the OfficeScan certificates should no longer be mismatched. You can confirm this by trying to update the OfficeScan client.