Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Updating the Policy Server Settings for Encryption Management for Microsoft Bitlocker/Apple Filevault of Endpoint Encryption

    • Updated:
    • 20 Oct 2019
    • Product/Version:
    • Endpoint Encryption 6.0
    • Platform:
Summary

Endpoint Encryption allows the update of PolicyServer settings in Encryption Management for Microsoft Bitlocker and Encryption Management for Apple FileVault, even after installation.

This article provides the steps to update the policy settings for agents for Microsoft Bitlocker & TMEE Encryption Management for Apple Filevault.

Details
Public

To update policy settings for agents where Encryption Management for Apple FileVault is installed, perform the following:

  1. On the agent, open a command line window as an administrator.
  2. Navigate to the following path:
    /Library/Application/Support/TrendMicro/FDEMM/
  3. Type the following commands:

    $sudo SupportTool –ChangeEnterprise username=<UserID>
    password=<password> newserver=<newserverhostname>
    newenterprise=<newenterprisename>
    newadmin=<groupadminonnewserver>
    newpassword=<passwordforgroupadmin> [skipKeyCheck=<true|false>]

    $sudo SupportTool -ChangeServer
    eusername=<EncryptedUserID>
    epassword=<EncryptedPassword>
    newserver=<newserverhostname>

    $sudo SupportTool -ChangeEnterprise
    eusername=<EncryptedUserID>
    epassword=<EncryptedPassword>
    newserver=<newserverhostname>
    newenterprise=<newenterprisename>
    enewadmin=<groupadminonnewserver>
    enewpassword=<passwordforgroupadmin>

     
    To use encrypted values for user names and passwords generated by CommandLineHelper.exe, replace the argument names with the eusername= and enewpassword= parameters.Premium.
  4. Verify that the changes were applied to the agent.

To update policy settings for agents where Encryption Management for Microsoft Bitlocker is installed, perform the following:

  1. On the agent, open a command line window as an administrator.
  2. Navigate to the following path:
    %Program Files%\Trend Micro\FDE Encryption Management
  3. Verify that the TMFDEForBitlocker.exe file exists on the location.
  4. Type the following commands:

    TMFDEForBitlocker.exe -ChangeServer username=<UserID> password=<Password> newserver=<Newserverhostname> TMFDEForBitlocker.exe -ChangeServer username=<UserID> password=<Password> newserver=<Newserverhostname>

    TMFDEForBitlocker.exe -ChangeServer
    eusername=<EncryptedUserID>
    epassword=<EncryptedPassword>
    newserver=<Newserverhostname>

    TMFDEForBitlocker.exe -ChangeEnterprise
    username=<UserID> password=<Password>
    newserver=<Newserverhostname>
    newenterprise=<Newenterprisename>
    newadmin=<Groupadminonnewserver>
    newpassword=<Passwordforgroupadmin>

    TMFDEForBitlocker.exe -ChangeEnterprise
    eusername=<EncryptedUserID>
    epassword=<EncryptedPassword>
    newserver=<Newserverhostname>
    newenterprise=<Newenterprisename>
    newadmin=<eGroupadminonnewserver>
    enewpassword=<ePasswordforgroupadmin>

     
    To use encrypted values for user names and passwords generated by CommandLineHelper.exe, replace the argument names with the eusername= and enewpassword= parameters.
  5. Verify that the changes were applied to the agent.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
000150791
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.