The process of installing the Security Agent for Mac on a single endpoint is similar to the installation process for other Mac software. During the installation, you may be prompted to allow connections to icorepluginMgr, which is used to register the Security Agent to the Server. Allow this connection when prompted.
Do the following:
- Get the agent installation package (tmsminstall.zip) from the Server using one of the following options:
- For Apex One on-Premise: Log on to the Apex One web console and click Plug-ins to open the Plug-in Manager. Open the Apex One for Mac web console, go to Agents → Agent Setup Files and click the link under Agent Installation File.
- The same page contains the link for the Agent Uninstallation File, which can be used to remove the Apex One for Mac Agent from a Mac computer.
- For Apex One on-Premise: Go to <Server installation folder>\TMSM_HTML\ActiveUpdate\ClientInstall and look for the tmsminstall.zip file.
- For Apex Central on-Premise and Apex One as a Service: Log on to the Apex Central or Apex One as a Service web console and go to Administration → Security Agent Download. Select Mac as the Operating System for the Agent to Download.
- For Vision One Standard Endpoint Security: Log on to the Vision One web console and go to Endpoint Security Operations → Endpoint Inventory. Click Agent Installer, then under Standard Endpoint Security, select macOS as the Operating System. Select the Endpoint Group Manager that the newly-deployed agents will report to. Click the Download installer icon () afterwards to download the Agent installer package.
- For Apex One on-Premise: Log on to the Apex One web console and click Plug-ins to open the Plug-in Manager. Open the Apex One for Mac web console, go to Agents → Agent Setup Files and click the link under Agent Installation File.
- Check for and uninstall any 3rd party security software on the endpoint that may conflict with the Agent.
- Launch/Unpack tmsminstall.zip (or TMStandardAgent_macOS_Apex_One_Mac.zip for Vision One) using a built-in archiving tool, such as Archive Utility.
- The files on tmsminstall.zip may become corrupted if users launch it using archiving tools not built-in on the Mac.
To launch tmsminstall.zip from Terminal, use the following command:
ditto -xk <tmsminstall.zip file path> <destination folder>
For example:
ditto -xk users/mac/Desktop/tmsminstall.zip users/mac/Desktop - Do not rename, alter, or move any files or folders in the installation package.
- The files on tmsminstall.zip may become corrupted if users launch it using archiving tools not built-in on the Mac.
- In the extracted folder, launch the tmsminstall.pkg file.
- When a message prompting you to continue with installation displays, click Continue to proceed.
Click the image to enlarge.
- On the Introduction screen, click Continue to proceed.
Click the image to enlarge.
- Read the reminders and click Continue.
Click the image to enlarge.
- On the Installation Type screen, click Install.
Click the image to enlarge.
- Fill in the Name and Password to begin the installation process.
Click the image to enlarge.
- Specify the name and password for an account with administrative rights on the endpoint.
- Once the installation is completed, click Close.
The client automatically registers to the server where the client installation package was obtained. The client also updates for the first time.
Click the image to enlarge.
- Perform the Security Agent post-installation tasks. For details, see Agent Post-installation .
References:
The Security Agent may be installed on several endpoints using 3rd Party MDMs like Workspace One (Airwatch), Jamf, Microsoft Intune, etc.
Kindly refer to the following article for the Requirements and Steps: Creating and Configuring MDM Profile(s) for Trend Micro Security Agent for Mac
The Security Agent for Mac installer may also be deployed through 3rd Party MDMs via Shell Script. Kindly refer to the following article for more information: Deploying the Apex One (Mac) Security Agent Installer via MDM using Shell Script
Deploy an operating system image that includes the Security Agent. After installation, the Security Agent automatically registers to the Apex One (Mac) server. Make sure to include the TMMakeGoldenImage tool in the master operating system image to resolve the issue of duplicate Security Agent IDs on the Apex One (Mac) server. Kindly refer to this article on how to get the tool: Deploying TMSM client using a cloned Mac image in version 2.0, 3.0 or Apex One™ (Mac)