To manually update the Scan Engine on the Information Server:

1. On the ServerProtect Information Server (IS), go to the ..\Program Files\Trend\SProtect\SpntShare\Engine directory and back up the Eng_NTKD.zip file to a temporary directory.
2. Download and extract the latest scan engine file to the ..\Program Files\Trend\SProtect\SpntShare\Engine directory.
3. Open the ..\SPROTECT\SPNTSHARE\server.ini file with a text editor.
4. Modify the server.ini file by changing the values of E.10 (32-bit VSAPI) and E.1000 (64-bit VSAPI). For example, if you are using VSAPI 8.95, the server.ini should like the following:

   E.10=VSAPI32_NT_KD, engine/ec895_kd.zip, 8.950.1094, 891514, 0.000.0000
   E.1000=VSAPI_AMD64_NTKD, engine/engv895_amd64_ntkd.zip, 8.950.1094, 1014504, 0.000.0000

   To manually replace the VSAPI from 8.95 to 9.75, you need to modify server.ini to the following:

   [ENGINE]
   E.10=VSAPI32_NT_KD, engine/ntkd9750.zip, 9.75.1007, 1113675, 6.51.1002
   E.1000=VSAPI_AMD64_NTKD, engine/engv_amd64_ntkd_v9750-1007.zip, 9.75.1007, 1236219, 6.51.1002

   Wherein:
   • ntkd9750.zip is the file name, which needs to be replaced in Engine folder
   • 9.75.1007 is the new VSAPI version
   • 1113675 is the file size of ntkd9750.zip, and
   • 6.51.1002 is a default value
5. Save and close the file.
6. Restart the Trend Micro ServerProtect Agent service.
7. On the ServerProtect management console, click Update > Update. Information about the current scan engine saved on the IS will be displayed. The scan engine version displayed should be the same as the one listed in server.ini file.

To roll back the Scan Engine on the Information Server:

1. Open the ..\SPROTECT\SPNTSHARE\server.ini file with a text editor.
2. Modify the server.ini file by changing the values of E.10 (32-bit VSAPI) and E.1000 (64-bit VSAPI) to the old one. For example, if you are now using the latest version and you want to roll it back to VSAPI 8.95, change the value to:

   E.10=VSAPI32_NT_KD, engine/ec895_kd.zip, 8.950.1094, 891514, 0.000.0000
   E.1000=VSAPI_AMD64_NTKD, engine/engv895_amd64_ntkd.zip, 8.950.1094, 1014504, 0.000.0000

   Where:

   • ec895_kd.zip is the file name, which needs to be replaced in Engine folder
   • 8.950.1094 is the previous VSAPI version
   • 891514 is the file size of ec895_kd.zip
3. Save and close the file.
4. Restart the Trend Micro ServerProtect Agent service.
5. On the ServerProtect management console, click Update > Update. 

   Information about the scan engine saved on the IS will be displayed. The scan engine version displayed should be the same as the one listed in server.ini file.

To automatically update the Scan Engine on the Normal Server:

1. Click Update > Update > Deploy Now and select Scan Engine.
2. Click Deploy to update the scan engine file to selected Normal Servers on the network.

To manually update the Scan Engine on the Normal Server:

1. Open a command prompt and type the following commands, one after another, to stop the ServerProtect services:

   Net stop spntsvc
   Net stop tmfilter
   Net stop vsapint

2. Back up the following files located in the ..\Sprotect directory of the Normal Server:

   tmfilter.sys
   tmprexpflt.sys
   tmxpflt.sys
   vsapint.sys

3. Copy the following engine files from the Information Server to the ..\Sprotect directory:

   tmfilter.sys
   tmprexpflt.sys
   tmxpflt.sys
   vsapint.sys

4. Type the following command to start the ServerProtect Normal Server:

   Net start spntsvc