- Open the Apex One as Service management console, https://{host}.manage.trendmicro.com/webapp/index.html.
Go to Policies > Policy Management, choose one of the Apex One Security Agent policies and Edit it.
Go to DETECTION & RESPONSE > Endpoint Sensor then untick Enable Endpoint Sensor.
- Save and exit to deploy this setting to Apex One Windows agents.
Do the same for Apex One Mac endpoints. Go to Policies > Policy Management, create or choose one of the Apex One (Mac) policies it then edit.
Go to DETECTION & RESPONSE > Endpoint Sensor then untick Enable Endpoint Sensor.
- Save and exit to deploy this setting to Apex One Mac agents.
- Open the Trend Vision One console, https://portal.xx.xdr.trendmicro.com/
Go to Inventory Management > Endpoint Inventory.
Click Enable.
- Wait for XDR Endpoint Sensor installation to finish.
UI Manual authentication after installation for Mac agents
Since macOS 10.13, Apple made some restriction on Apps to forcibly ask user to manually allow permission for particular process.
Check Authorizing the Apex One (Mac) XDR Endpoint Sensor for details about the popup authentication process after the installation of agent.
After enabling XDR Endpoint Sensor, the agent's "Features enabled" column becomes "XDR Sensor".
Once XDR Endpoint Sensor has successfully reported to the Trend Vision One Endpoint Inventory app (i.e. Status = Reporting to XDR), the following process/service/registry will be spawn on the agent side:
Platform | Service | Process |
---|---|---|
Windows | CloudEndpointService | CloudEndpointService.exe |
Mac | com.trendmicro.EDRAgent | EDRAgent |
Linux*1 | vls_agent.service | vls_agent |
*1: Apex One Endpoint Sensor does not support the Linux platform. Only XDR Endpoint Sensor supports it.