If users want to install the Apex One Endpoint Sensor database and Apex One database in different MSSQL instances, they should use the tool TrendMicroEndpointSensorHelper to achieve it.
If the Apex One installation package version is 1071, please contact Trend Micro Technical Support to get the tool.
After version 1071, the tool will be included in the installation package.
- The tool folder is [Apex One Folder]\PCCSRV\Admin\Utility\iServicePackage\iES
- Copy the iATAS folder to tool folder.
- iATAS folder is [Apex One Folder]\PCCSRV\Admin\Utility\iServicePackage\iATAS
If the customer wants to install the Apex One Endpoint Sensor database and Apex One database in different MSSQL instances, refer to the following workarounds, depending on the customer's situation:
- Install Apex One server without iES and another MSSQL instance for iES should be installed.
- Navigate to the folder of the tool.
- If you download the tool from the wiki page, make sure the folder structure is the same as shown in the following:
- If you download the tool from the wiki page, make sure the folder structure is the same as shown in the following:
- Modify the ServerSetup section in config.xml based on the customer's environment.
| Parameter | Description | Example | Note |
|---|---|---|---|
| OSCEUrl | The hostname of the Apex One server | ApexOne-URL | |
| OSCESSLPort | The port number of ApexOne web server | 4343 | 4343 is default value while installing Apex One. Users can check the IIS setting to know the HTTPS port. |
| iESUrl | The hostname of the Endpoint Sensor server | ApexOne-URL | This value must be the same as the OSCEUrl value. |
| iESSSLPort | The port number of ApexOne web server | 4343 | This value must be the same as the OSCESSLPort value. |
| SqlInstance | The instance name of the MS-SQL server | (local) | If you need to install to a specific instance, you should configure it as "[Server name]\[instance name]" |
| DatabaseName | The database name | ApexOne-iES | The DB named for iES. |
| SQLUserName | The user name of the account used to connect to the database | sa | The account role must be granted with dbcreator and sysadmin permission for the iES DB. |
| SQLPassword | The password of the account used to connect to the database | P@ssw0rd | The password must be in plain text. |
| IsWinAuth | The authentication type | 0 | 0: False (SQL Server Authentication); 1: True (Windows Authentication) |
- Rigt-click the tool and click Run as Administration.
- Select option 0 in the console to install the Endpoint Sensor server.
- Once Apex One Endpoint Sensor is successfully installed, you will get related messages as shown in the following:
- The user has installed another MSSQL instance for iES.
- On the Apex One server, turn off the Apex One Endpoint Sensor service.
- Back up the Apex One Endpoint Sensor database and restore it to another instance. Refer to the Microsoft KB: Back Up and Restore of SQL Server Databases.
- Navigate to the folder of the tool, and modify the ChangeSQLInfo section in config.xml based on the customer's environment.
| Parameter | Description | Example | Note |
|---|---|---|---|
| SqlInstance | The instance name of the MS-SQL server | (local) | If you need to install to a specific instance, you should configure it as "[Server name]\[instance name]". |
| DatabaseName | The database name. | ApexOne-iES | The DB named for iES. |
| SQLUserName | The user name of the account used to connect to the database. | sa | The account role must be granted with dbcreator and sysadmin permission for the iES DB. |
| SQLPassword | The password of the account used to connect to the database | P@ssw0rd | The password must be in plain text. |
| IsWinAuth | The authentication type | 0 | 0: False (SQL Server Authentication); 1: True (Windows Authentication) |
- Right-click the tool and click Run as Administrator.
- Select option 1 in the console to install the Endpoint Sensor server.
- Once Apex One Endpoint Sensor is successfuly installed, you will get related messages as shown in the following:
- Either different SQL servers or the same SQL server, users could use the tool to install databases in the different SQL instances.
- Once the Apex One Endpoint Sensor database and Apex One database are installed in different MSSQL instances, users need to revise the SQL credential via this tool because Apex One Endpoint Sensor DB credential does not sync up with Apex One DB credential.
- Users can start with step 4 under "Apex One and Apex One Endpoint Sensor Databases Installed" to change the SQL configuration.
- If the user detaches the database to a different instance, the tool does not support migrating the Apex One Endpoint Sensor database to the same instance as the Apex One database.
Known issue
- Users may encounter the following issue:
- Check the properties of any *.dll file in the tool folder. If there is a security notification same as shown in the image, execute the following PowerShell command to unlock all *.dll files. * Powershell needs to be run as administrator.
dir [tool folder] -Recurse | Unblock-File
Tool log
-
[Tool folder]\debug.txt
Apex One Endpoint Sensor logs
-
C:\Windows\TMESSetupDebug.log
- C:\Windows\iATASSetupDebug.log