Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually unregistering Trend Micro Vision One (XDR) in Cloud One Workload Security

    • Updated:
    • 22 Sep 2021
    • Product/Version:
    • Cloud One - Workload Security
    • Trend Micro Vision One
    • Platform:
Summary

After disconnecting the Cloud One Workload Security account from Trend Micro Vision One Product Connectors, the enrollment status in Cloud One Workload Security console will not immediately change from "Registered" to "Not registered".

enrollment status

This article explains why, and will show steps on how to unregister it manually.

Details
Public

Since there is no option on the Cloud One Workload Security console to unregister Vision One/XDR, we need to wait for a maximum of 24 hours for the enrollment status to sync in the back-end. If there is a need to change it immediately, we can delete the registration via API call. The following steps uses Postman app to execute the API requests.

  1. Generate an API key on the Cloud One Workload Security account. Refer to the Create an API key topic for reference.
  2. Download and install Postman.
  3. Turn off Postman SSL certificate verification. Go to File > Settings.

    turn off Postman SSL certificate verification

  4. Open the Postman app then click New.

    click New

  5. Click HTTP Request.

    Click HTTP Request

  6. Select GET as the HTTP method and then type the following request URL.

    GET https://workload.{cloudoneregion}.cloudone.trendmicro.com/api/xdrregistrations

    For accounts created before August 4, 2021, you can use us-1 as region.

    For new accounts created on or after August 4, 2021, you can verify the region by accessing the Account Management page of your Cloud One console.

  7. Select Headers then add the following keys and their corresponding values:

    api-secret-keyValue: key generated from step 1
    api-versionValue: v1
    Content-TypeValue: application/json

    add keys and values

  8. Click Send then check the Body to see the status of the request.

    click Send then check Body

  9. Change the HTTP method to DELETE then add the XDR registration ID on the request URL.

    DELETE https://workload.{cloudoneregion}.cloudone.trendmicro.com/api/xdrregistrations/{xdrRegistrationID}

  10. Click Send. If the API response is "204 No Content", this means that Trend Micro Vision One/XDR was successfully unregistered.

    204 No Content

  11. Check on the Cloud One Workload Security Console to verify that the enrollment status is now showing as "Not Registered".

    Not Registered status

Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
000289066
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.