Views:

To resolve the issue, do the following:

  1. Make sure that the Windows machine has the following required certificates:

    • VeriSign Class 3 Public Primary Certification Authority - G5
    • VeriSign Universal Root Certification Authority
    • DigiCert Assured ID Root CA
    • DigiCert Global Root CA
    • DigiCert High Assurance EV Root CA
    • DigiCert Global Root G2
    • USERTrust RSA Certification Authority
    • DigiCert Trusted Root G4
     
    If any of these certificates do not exist, apply the solution from the KB article: Updating the VeriSign, DigiCert, USERTrust RSA certificate on Deep Security.
     
  2. Make sure that there is no third party AV, Trend Micro OfficeScan/Apex One, or ServerProtect installed on the same machine.
  3. If you are using an older version of Windows (2008 or lower), make sure to apply the Microsoft patch to support SHA-2 signature. For more info, refer to the KB article: New versions of Trend Micro Deep Security agents for Windows will only be signed with SHA-2.

  4. Uninstall the agent.

     

    You need to disable agent self-protection to allow uninstalling of agent. To disable self-protection, execute the following in <drive>:\program files\trend micro\deep security agent\ on Administrator command line:

    dsa_control -s0

     

    If the agent’s self-protection password is enabled on the policy, execute:

    dsa_control -s0 -p <password>

     

    Substitute “<password>” with the correct password.

     

  5. After rebooting the machine, run the following commands on the Administrator command line to verify that there is no longer Anti-malware driver running:

    • sc query tmactmon
    • sc query tmevtmgr
    • sc query tmcomm
    • sc query tmeyes
  6. Install the agent and activate it.

If the problem still exists, contact Trend Micro Technical Support and provide the following:

  • Screenshot of Microsoft Management console’s Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates or output of the following Administrator powershell command:

    ls Cert:\LocalMachine\root

  • Agent diagnostic package. For more info, refer to the KB article:Creating Deep Security diagnostic packages
Keywords: Anti-malware Engine Offline,Cloud One Workload Security,agent error,cause,Anti-malware module,wrong status,