Views:

Problem Description

According to Trend Vision One™ Standard Endpoint Protection: New Web Browser Extension Support, the Trend Micro Toolbar for Enterprise browser extension is automatically downloaded and installed on supported endpoints when the "Check HTTPS URLs" option is enabled, starting from Apex One version 14.0.20315.

The Trend Micro extension may block extensions defined by Google Workspace due to a conflict between the ExtensionInstallForcelist registry key and cloud policy.

Trend Micro Toolbar for Enterprise Browser Extension causes Google Workspace ExtensionInstallForcelist Registry Key

Based on the chrome://policy output on affected machines, the cloud source value is overwritten by the platform source value, which causes the conflict.


Scope of Impact

This issue occurs only in environments where Google Workspace administrators have defined custom extensions. Standard deployments without cloud policies are not affected.


Mitigation

The hotfix is available after installing the following versions:

  • Standard Endpoint Protection (SEP) version: 14.0.0.20600
  • XDR Endpoint Security (XES) version: 1.2.0.7218

To prevent conflicts, the browser extension force-install setting will be merged into the customer’s cloud policy.

  1. Open the Google Admin Console and add the Trend extension to the policy.
    (Extension ID: iiipkionnkhdcficbbpionjlfmnjgnlg)

    Add Trend Extension ID to the policy in Google Admin Console

  2. Download tm_netsrv.ini and copy it to C:\windows.
  3. Wait for the new configuration to be applied.
  4. Open chrome://policy/ and verify that the raw data includes the Trend extension ID without conflict as shown below.

    Verify that the Trend Exetension ID has been added to the Chrome App with no conflicts