Views:

Requirements:

  • Apex One On-Premise Build 9167 or later
  • Apex One as a Service March 2021 build or later
  • Network connection to Apex One server is required for “MyDomain” settings to apply specific domain information.
 
All other switches that will be used with the Apex One agent will be aligned with msiexec by Windows. For more information, refer to the Windows documentation topic: Command-Line Options.
 

Fresh install

For Fresh install, run the following command on the endpoint machine:

msiexec.exe /i ApexOne.msi MyServer=”{Target Apex One server : (http port} | (https port)}” MyDomain="{Workgroup\Subdomain}" /Lv+ "{log output path"

For example:

msiexec.exe /i ApexOne.msi MyServer="win2016-x64:8080|4343" MyDomain="Workgroup\Subdomain" /Lv+ "c:\temp\MSI.log"

 
To start a silent installation, use the following command:
msiexec.exe /i ApexOne.msi /qn /promptrestart MyServer=”{Target Apex One server : (http port} | (https port)}” MyDomain="{Workgroup\Subdomain}" /Lv+ "{log output path"
For Example: msiexec.exe /i ApexOne.msi /qn /promptrestart MyServer="win2016-x64:8080|4343" MyDomain="Workgroup\Subdomain" /Lv+ "c:\temp\MSI.log"
 

Program upgrade

 

Make sure to put the latest msi package into the same directory as the last installed package.

For example: Last installed package was b9179.msi installer, launched under C:\download\

Please also put b9204.msi installer under C:\download\

 

To perform program upgrade, run the following command on the endpoint machine:

msiexec.exe /fov "{Package directory\ApexOne-forupgrade.msi" /L*v "{log output path"

For example:

msiexec.exe /fov "C:\download\b9204.msi" /L*v "c:\temp\MSI.log"

To create and configure a single MSI security agent installation package:

  1. Open the Ofcscan.ini file in the \PCCSRV\ folder of the Apex One server A.
  2. Add the following key under "INI_CLIENT_SETUP_SECTION" and set its value to "1":

    [INI_CLIENT_SETUP_SECTION]
    ForceRefresh=1
    BypassServerChecking=1

    Where:

    ForceRefresh=1 allows the security agent to register to the new server from which the agent package was created
    BypassServerChecking=1 allows the security agent to launch a package created from another Apex One server

  3. Register the Apex One security agents to different specific servers by adding the following keys under "INI_CLIENT_SETUP_SECTION" and assigning the correct values:

    [INI_CLIENT_SETUP_SECTION]
    AssignedServerNumber= <total number of Assigned Servers>
    AssignedServer1=[ClientIPRangeStart],[ClientIPRangeEnd], [Server1][:Port][\Domain1\Domain2]
    AssignedServer2=[ClientIPRangeStart],[ClientIPRangeEnd], [Server2][:Port][\Domain1\Domain2]
    ...
    AssignedServerX=[ClientIPRangeStart],[ClientIPRangeEnd], [ServerN][:Port][\Domain1\Domain2]

    For example:

    [INI_CLIENT_SETUP_SECTION]
    BypassServerChecking=1
    AssignedServerNumber=3
    AssignedServer1=10.1.1.1,10.1.1.10,10.1.1.5:4343\Domain1\Domain2
    AssignedServer2=10.2.1.1,10.2.1.10,OSCE_Srv_2:4343
    AssignedServer3=10.3.1.1,10.3.1.100,SrvHostName3:4343

  4. Save the changes and close Ofcscan.ini.
  5. Create the MSI installation package.
     
    If you are upgrading security agents using the MSI package and the upgraded agents need to be moved to a specified server, manually add the following registry key. Otherwise, proceed to the next step.

    Path: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
    Key: SupportsAssignedServer
    Type: REG_DWORD
    Value: 1

  6. Install or upgrade the security agents using the MSI package.
 
  • The "AssignedServerNumber" key accepts any integer number up to 1000.
  • The "AssignedServerX" key allows users to specify a certain IP range of agent that should be registered to the assigned server.
  • If the domain is not specified, the client will be registered to the default domain of the server.
  • Make sure to put ''[ServerN][:Port][\Domain1\Domain2]'' on the same row with '[ClientIPRangeStart],[ClientIPRangeEnd]'.
  • "ServerN" can be assigned an IP address or a hostname of the server.
  • If you use the IP address of "ServerN", make sure you can ping the IP address of ''ServerN'' from the security agent machine.
  • If you use the hostname of "ServerN", make sure you can ping the hostname of ''ServerN'' from the security agent machine.
  • Make sure the new Apex One server uses the same certificate during server installation (OfcNTCer.dat). If not, security will fail to communicate with the new server.