If newly installed servers with Trend Micro Anti-Virus (TM AV) show the anti-malware engine offline, it is likely due to secureboot being enabled and the key not being enrolled. This issue can be resolved by following the steps in the KB article provided by Trend Micro.
When secureboot is enabled, the key must be enrolled to ensure that the anti-malware engine is online. If the key is not enrolled, the anti-malware engine will be offline and the DSM and DSA versions will be affected. To resolve this issue, follow the steps in the KB article provided by Trend Micro.
Once the key is enrolled, the anti-malware engine will be online and the DSM and DSA versions will be updated. This will ensure that the newly installed servers with TM AV are protected against malware and other threats.
Ref
https://help.deepsecurity.trendmicro.com/aws/agent-linux-secure-boot.html