Summary
A policy can be configured to allow self-protection to be overridden locally. When disabling self-protection via CLI and then running the command to reset the agent, you may encounter the following error:
“HTTP Status: 403 - Forbidden - untrusted peer”
dsa_control -s=0 -p <password>
C:\Program Files\Trend Micro\Deep Security Agent>dsa_control -r
To reset an agent with self-protection locally, the password switch must be included within the reset command:
dsa_control -r -p <password>
For further information on other options for dsa_control, read this Help Center article on Command-line basics.