Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Upgrading Apex One Endpoint Sensor to XDR Sensor

    • Updated:
    • 17 Sep 2021
    • Product/Version:
    • Apex One All
    • Platform:
Summary

This article contains the manual procedure on how to upgrade Apex One Endpoint Sensor (iES) to XDR Sensor (xES).

A detailed comparison of Apex One Endpoint Sensor and XDR sensor can be found in this article.

Details
Public
  1. Open the Apex One as Service management console, https://{host}.manage.trendmicro.com/webapp/index.html.
  2. Go to Policies > Policy Management, choose one of the Apex One Security Agent policies and Edit it.

    go to Policy Management

  3. Go to DETECTION & RESPONSE > Endpoint Sensor then untick Enable Endpoint Sensor.

    untick Enable Endpoint Sensor

  4. Save and exit to deploy this setting to Apex One Windows agents.
  5. Do the same for Apex One Mac endpoints. Go to Policies > Policy Management, create or choose one of the Apex One (Mac) policies it then edit.

    edit policy

  6. Go to DETECTION & RESPONSE > Endpoint Sensor then untick Enable Endpoint Sensor.

    untick Enable Endpoint Sensor

  7. Save and exit to deploy this setting to Apex One Mac agents.
 
By default, Trend Micro Endpoint Base Camp is installed on all Apex One as a Service agents. Before proceeding to the following steps, ensure Trend Micro Base Camp is working properly on your endpoints. For more details, refer to the KB article: What is Trend Micro Endpoint Basecamp?
 
  1. Submit a Technical Support ticket to Trend Micro to enable Trend Micro Vision One Endpoint Inventory.
  2. Open the Trend Micro Vision One console, https://portal.xx.xdr.trendmicro.com/
  3. Go to Inventory Management > Endpoint Inventory.

    1. Select endpoints directly in tab No features enable or tab All

      Select endpoints

       
      Only agents with Trend Micro Endpoint Base Camp installed will be displayed in "No features enabled" or tab "All".
       
    2. Search the endpoints by: (1) Endpoint name, (2) IP address, (3) Operating System.

      search endpoints

  4. Click Enable.

    enable

  5. Wait for XDR Sensor installation to finish.
  6. UI Manual authentication after installation for Mac agents

    Since macOS 10.13, Apple made some restriction on Apps to forcibly ask user to manually allow permission for particular process.

    Check Authorizing the Apex One (Mac) XDR Sensor for details about the popup authentication process after the installation of agent.

  7. After enabled XDR sensor, agent's "Feature enabled" field will become "XDR sensor".

    Reporting to XDR

Once XDR Sensor has successfully reported to the Trend Micro Vision One Endpoint Inventory app (i.e. Status = Reporting to XDR), the following process/service/registry will be spawn on the agent side:

PlatformServiceProcess
WindowsCloudEndpointServiceCloudEndpointService.exe
Maccom.trendmicro.EDRAgentEDRAgent
Linux*1vls_agent.servicevls_agent

*1: Apex One Endpoint Sensor does not support the Linux platform. Only XDR Sensor supports it.

Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
000286408
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.