Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually transferring or re-establishing communication between OfficeScan/Apex One agents and server using the IPXfer Utility

    • Updated:
    • 17 Jun 2019
    • Product/Version:
    • Apex One All.All
    • Apex One as a Service All.All
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • N/A N/A
Summary

The Client Mover I/Ipxfer is a tool used for the following:

  • Transfer OfficeScan clients/agents between servers with the same type (HTTP- or file-based) and language version
  • Transfer clients/agents from servers with different versions as long as the old server meets the minimum service pack or patch required by the new server
  • Re-establish connection between agent and server
  • Reconfigure agent to use a different listening port
  • Update the server certificate on the agent
Details
Public

When moving clients to another OfficeScan server, they will automatically inherit the settings of the parent group or domain. They will not retain their settings from the old OfficeScan server.

To get the server name or IP, server port, and agent port, open the ..\Program Files (x86)\Trend Micro\OfficeScan\PCCSRV\ofcscan.ini file in OfficeScan Security Server using a text editor such as Notepad. Note the values of the following entries:

  • Master_DomainName
  • Master_DomainPort
  • Client_LocalServer_Port
  • Master_SSLPort

To move the clients/agents, follow the procedure for your OfficeScan version:

 
  • Please use the IpXfer tool on the current OfficeScan server if the target server version is newer.
  • Offline agents cannot be moved, as they need to be able to communicate with the OfficeScan server. For methods that you can use regardless if the two servers can communicate with each other, refer to the following article: Difference of Move Function and Ipxfer in OfficeScan.
  • For 32-bit machines, please use IpXfer.exe. For 64-bit machines, please use IpXfer_x64.exe.
  • To update the agent certificate, follow the procedure pointing back to the same server.
  • To update the agent listening port, follow the procedure pointing back to the same server while changing the agent port (the –c parameter) to the desired port.
  1. Go to <Server installation folder>\PCCSRV\Pccnt\Common.
  2. Copy the OfcNTCer.dat file and paste it under the <Server installation folder>\PCCSRV\Admin\Utility\IpXfer directory.
  3. Do one of the following options:
    • Option 1: Run IpXfer.exe locally on the machine:
      1. Go to ..\Program Files\Trend Micro\OfficeScan\PCCSRV\Pccnt\Common.
      2. Copy the OfcNTCer.dat file and paste it under the ..\Program Files\Trend Micro\OfficeScan\PCCSRV\Admin\Utility\IpXfer directory.
      3. Go to ..\Program Files\Trend Micro\OfficeScan\PCCSRV\Admin\Utility\ipXfer directory on the OfficeScan server and locate the IpXfer.exe and IpXfer_x64.exe files.
      4. Copy the IpXfer.exe, IpXfer_x64.exe, and the OfcNTCer.dat file to a specific folder on the agent to be transferred.
      5. Go to the folder where the files were copied.
      6. Run the following (assuming 64-bit):

        IpXfer_x64.exe -s < Target server name or IP> -p <server HTTP port> -sp <server HTTPS port> -c <agent port> -e OfcNTCer.dat -pwd <agent unload password>

        As of OfficeScan XG SP1, agent communication with the server moves to the server’s HTTPS port. Thus, there is an additional parameter of –sp for the server’s HTTPS port. By default, this port is 4343. Below is an example:

        IpXfer_x64.exe -s oscexg.contoso.local -p 8080 –sp 4343 -c 12345 –e OfcNTCer.dat -pwd P@ssw0rd

    • Option 2: Use the UNC path of IpXfer in the server:
      1. On the agent machine that you want to transfer, open the Run window.
      2. Enter the UNC path of the IpXfer.exe/IpXfer_x64.exe file on the old OfficeScan server using the shared folder, ofcscan (example assumes 64-bit agent). As of OfficeScan XG SP1, agent communication with the server moves to the server’s HTTPS port. Thus, there is an additional parameter of –sp for the server’s HTTPS port. By default, this port is 4343:

        \\<server name or IP>\ofcscan\admin\utility\ipxfer\ipxfer_x64.exe -s <Target server name or IP> -p <server HTTP port> -sp <server HTTPS port> -c <agent port> -e \\<target server name or IP>\ofcscan\PCCNT\Common\OfcNTCer.dat -pwd <agent unload password>

        For example:

        \\OSCEXG\ofcscan\admin\utility\ipxfer\ipxfer_x64.exe -s oscexg.contoso.local -p 8080 –sp 4343 -c 12345 -e
        \\OSCEXG\ofcscan\PCCNT\Common\OfcNTCer.dat -pwd P@ssw0rd

Option 1: Run IpXfer.exe locally on the machine

  1. Go to ..\Program Files\Trend Micro\OfficeScan\PCCSRV\Pccnt\Common.
  2. Copy the OfcNTCer.dat file and paste it under the ..\Program Files\Trend Micro\OfficeScan\PCCSRV\Admin\Utility\IpXfer directory.
  3. Go to ..\Program Files\Trend Micro\OfficeScan\PCCSRV\Admin\Utility\ipXfer directory on the OfficeScan server and locate the IpXfer.exe and IpXfer_x64.exe files.
  4. Copy the IpXfer.exe, IpXfer_x64.exe, and the OfcNTCer.dat file to a specific folder on the agent to be transferred.
  5. Go to the folder where the files were copied.
  6. Run the following (assuming 64-bit):

    IpXfer_x64.exe -s <Target server name or IP> -p <server port> -c <agent port> -e OfcNTCer.dat –p <Unload Password>

    For example:

    IpXfer_x64.exe -s osce.contoso.local -p 8080 -c 12345 –e OfcNTCer.dat –p Password1

Option 2: Use the UNC path of IpXfer in the server

  1. On the agent machine that you want to transfer, open the Run window.
  2. Enter the UNC path of the IpXfer.exe/IpXfer_x64.exe file using the shared folder, ofcscan:

    \\<server name or IP>\ofcscan\admin\utility\ipxfer\ipxfer.exe -s <server FQDN or IP> –p <server HTTP port> -c <agent port> -e \\<server name or IP>\ofcscan\PCCNT\Common\OfcNTCer.dat –p <unload password>

    For example:

    \\OSCE11\ofcscan\admin\utility\ipxfer\ipxfer.exe -s osce11.contoso.local -p 8080 -c 12345 -e
    \\OSCE11\ofcscan\PCCNT\Common\OfcNTCer.dat -p Password1

Premium
Internal
Rating:
Category:
Migrate
Solution Id:
0127004
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.