Requirements:
- Apex One On-Premise Build 9167 or later
- Apex One as a Service March 2021 build or later
- Network connection to Apex One server is required for “MyDomain” settings to apply specific domain information.
Fresh install
For Fresh install, run the following command on the endpoint machine:
msiexec.exe /i ApexOne.msi MyServer=”{Target Apex One server : (http port} | (https port)}” MyDomain="{Workgroup\Subdomain}" /Lv+ "{log output path"
For example:
msiexec.exe /i ApexOne.msi MyServer="win2016-x64:8080|4343" MyDomain="Workgroup\Subdomain" /Lv+ "c:\temp\MSI.log"
msiexec.exe /i ApexOne.msi /qn /promptrestart MyServer=”{Target Apex One server : (http port} | (https port)}” MyDomain="{Workgroup\Subdomain}" /Lv+ "{log output path"
For Example: msiexec.exe /i ApexOne.msi /qn /promptrestart MyServer="win2016-x64:8080|4343" MyDomain="Workgroup\Subdomain" /Lv+ "c:\temp\MSI.log"
Program upgrade
Make sure to put the latest msi package into the same directory as the last installed package.
For example: Last installed package was b9179.msi installer, launched under C:\download\
Please also put b9204.msi installer under C:\download\
To perform program upgrade, run the following command on the endpoint machine:
msiexec.exe /fov "{Package directory\ApexOne-forupgrade.msi" /L*v "{log output path"
For example:
msiexec.exe /fov "C:\download\b9204.msi" /L*v "c:\temp\MSI.log"
To create and configure a single MSI security agent installation package:
- Open the Ofcscan.ini file in the \PCCSRV\ folder of the Apex One server A.
- Add the following key under "INI_CLIENT_SETUP_SECTION" and set its value to "1":
[INI_CLIENT_SETUP_SECTION]
ForceRefresh=1
BypassServerChecking=1Where:
ForceRefresh=1 allows the security agent to register to the new server from which the agent package was created
BypassServerChecking=1 allows the security agent to launch a package created from another Apex One server - Register the Apex One security agents to different specific servers by adding the following keys under "INI_CLIENT_SETUP_SECTION" and assigning the correct values:
[INI_CLIENT_SETUP_SECTION]
AssignedServerNumber= <total number of Assigned Servers>
AssignedServer1=[ClientIPRangeStart],[ClientIPRangeEnd], [Server1][:Port][\Domain1\Domain2]
AssignedServer2=[ClientIPRangeStart],[ClientIPRangeEnd], [Server2][:Port][\Domain1\Domain2]
...
AssignedServerX=[ClientIPRangeStart],[ClientIPRangeEnd], [ServerN][:Port][\Domain1\Domain2]For example:
[INI_CLIENT_SETUP_SECTION]
BypassServerChecking=1
AssignedServerNumber=3
AssignedServer1=10.1.1.1,10.1.1.10,10.1.1.5:4343\Domain1\Domain2
AssignedServer2=10.2.1.1,10.2.1.10,OSCE_Srv_2:4343
AssignedServer3=10.3.1.1,10.3.1.100,SrvHostName3:4343 - Save the changes and close Ofcscan.ini.
- Create the MSI installation package.
If you are upgrading security agents using the MSI package and the upgraded agents need to be moved to a specified server, manually add the following registry key. Otherwise, proceed to the next step.
Path: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
Key: SupportsAssignedServer
Type: REG_DWORD
Value: 1 - Install or upgrade the security agents using the MSI package.
- The "AssignedServerNumber" key accepts any integer number up to 1000.
- The "AssignedServerX" key allows users to specify a certain IP range of agent that should be registered to the assigned server.
- If the domain is not specified, the client will be registered to the default domain of the server.
- Make sure to put ''[ServerN][:Port][\Domain1\Domain2]'' on the same row with '[ClientIPRangeStart],[ClientIPRangeEnd]'.
- "ServerN" can be assigned an IP address or a hostname of the server.
- If you use the IP address of "ServerN", make sure you can ping the IP address of ''ServerN'' from the security agent machine.
- If you use the hostname of "ServerN", make sure you can ping the hostname of ''ServerN'' from the security agent machine.
- Make sure the new Apex One server uses the same certificate during server installation (OfcNTCer.dat). If not, security will fail to communicate with the new server.