By default, Apex One servers wait up to 30 minutes for each notified agent to complete the update sequence. If an agent fails to complete the update within the specified time, the server notifies the next agent in queue. For agents, there are up to five retry attempts at 15-minute intervals to download updates from the server. The same goes for Apex One servers.

To identify Update Agents on an Apex One Server, the server sends a message to such agents and waits for 15 minutes (by default) to obtain the updates. If no response is received, the server retries up to five times.

If you want to ensure that the Security Agents receive updates from the Update Agent, you can follow these steps:

1. Refer to this documentation to configure Security Agents to retrieve updates from the Update Agent.
2. After you have configured the settings, check the agent's Tmudump.log file to confirm if the agent is connecting to the update agent. You can find the file at C:\Program Files (x86)\Trend Micro\Security Agent\AU_Data\AU_Log.
3. In the log file, search for the string 'Downloading [https://192.3Ø.24Ø.88:21112/activeupdate/server.ini]'. The highlighted IP address reflects the sample Update Agent to which the agent is connecting to retrieve patterns.
4. You may also find the update agent by looking for the 'UpdateFrom' key in the following registries: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.
5. You may also check the local installation folder ous.ini at C:\Program Files (x86)\Trend Micro\Security Agent\ous.ini.

By following these steps, you can identify the Update Agents and determine if Security Agents are retrieving updates from them successfully.