- Log in to Trend Micro Vision One console.
Prerequisite: Trend Micro Vision One Account
If you do not have an active Trend Micro Vision One account, you may refer to the article, Activate Trend Micro Vision One using the Trend Micro Vision One Essential Link for step-by-step illustration on Trend Micro products onboarding process. - Go to Workflow and Automation > Service Gateway Inventory, and click Download Virtual Appliance.
- Select VMware ESXi (OVA).
- Check "I agree to the ..."
- Click Download Disk Image.
- Import the .ova to VMware workstation.
- When done the importing .ova, open the xxxxx.vmx file.
- Add the following advanced configuration settings. Do this in order to disable one-off time synchronization in a VM.
time.synchronize.continue = "FALSE"
time.synchronize.restore = "FALSE"
time.synchronize.resume.disk = "FALSE"
time.synchronize.shrink = "FALSE"
time.synchronize.tools.startup = "FALSE"
time.synchronize.tools.enable = "FALSE"
time.synchronize.resume.host = "FALSE"The virtual appliance only supports UTC time. Make sure that your VM is correctly configured to get the correct date/time. - Adjust the processor, memory and hard disk if necessary.
- Power on the VM.
- Log in to Trend Micro Vision One - Service Gateway, and then change the password, the default credentials are admin / V1SG@2021
Service Gateway Deployment OLH:
For the detail deployment steps with VMware ESXi please refer to, Deploying a Service Gateway Virtual Appliance with VMware ESXi.
For the detail deployment steps with Microsoft Hyper-V please refer to, Deploying a Service Gateway Virtual Appliance with Microsoft Hyper-V. - Type "show interface" and press ' ENTER' to get the device name.
- Type "enable" and press 'ENTER' to enable administrative commands.
- Configure the network by the CLISH command:
configure network primary ipv4.static <interface> <ip> <gateway> <dns1> <dns2> <cni>
- Configure the hostname:
configure endpoint <hostname>
- Copy the registration token from Step 5.
- Register to Trend Micro Vision One:
Register [registration token]
- Check the status on Service Gateway Inventory.
- Log in to Trend Micro Vision One console.
- Go to Inventory Management > Service Gateway Inventory.
- Click the name of the Service Gateway that you registered to Vision One. The Service Gateway screen appears.
- Click Manage Services.
- Click Install on the ActiveUpdate Service.
- Click the gear icon on the ActiveUpdate Service to display the ActiveUpdate Service configuration panel.
- Click Add and input all the following ActiveUpdate URLs that Apex Central uses in URL field and description field, then click √.
- https://apexcentral80-p.activeupdate.trendmicro.com/activeupdate
- https://cm60-lspn30-p.activeupdate.trendmicro.com/activeupdate
- https://cm55-lspn25WR-p.activeupdate.trendmicro.com/activeupdate
- https://avclientxml.trendmicro.com
- Click Save. Completion may take a while depending on the number of components to be downloaded.
- Click the gear icon of ActiveUpdate Service to open configure panel.
- In the ActiveUpdate URL section, click Generate to get a local ActiveUpdate URL for the on-premise Apex Central.
- Click Copy URL for Apex Central to use.
- Switch to the Apex Central management console. Go to Administration > Scheduled/Manual Updates
- In Update Source section, use the URL copied from step 10 in Other update source field.
Users have two options to use the download URL as their update source:
- The URL generated in step 10 in ActiveUpdate Configuration section above
- The ActiveUpdate service URL, ex, https://[ServiceGateway_IP]/activeupdate
(This option is recommended for products that use multiple ActiveUpdate URLs, e.g. Apex Central.)