Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually updating the Deep Security Relay Agent (DSR)

    • Updated:
    • 30 Dec 2019
    • Product/Version:
    • Deep Security 10.0
    • Deep Security 10.1
    • Deep Security 10.2
    • Deep Security 10.3
    • Deep Security 11.0
    • Deep Security 11.1
    • Deep Security 11.2
    • Deep Security 11.3
    • Deep Security 12.0
    • Deep Security 20.0
    • Platform:
    • VMware ESXi 5.1
    • VMware ESXi 5.5

You can manually update a Deep Security Relay when it cannot directly get updates from an update server. This process can be done using an update bundle created from another Deep Security Relay that can obtain its updates.


To manually update the Deep Security Relay:

  1. Generate an update bundle by running a command from the installation path of the source Deep Security Relay host.
    For example, if the installation path is C:\Program Files\Trend Micro\Deep Security Agent, run the following command:

    dsa_control.cmd –b

    For Linux, run /opt/ds_agent/dsa_control -b

  2. Check the created update bundle in ZIP format located under the C:\ProgramData\Trend Micro\Deep Security Agent\relay folder. The bundle should contain the copies of update files. Its filename appears similar to "".
  3. Copy the "" file to the corresponding base folder of the Deep Security Relay:
    • Windows: <install path>\Deep Security Agent
    • Linux: /opt/ds_agent
  4. Apply the security update by doing any of the following:
    • Restart the Deep Security Agent service.
    • On the Deep Security Manager console, click Download Security Updates from the specific Deep Security Relay.

For further issues regarding Deep Security Relay Agent, get the following files under ...\Program Files\Trend Micro\Deep Security Agent\lib\iaulogs and send them to Trend Micro Technical Support:

  • iau.log - This file contains information about the module that processes the update.
  • TmuDump.txt - This file contains the details about the connection attempts with the update server.
When using offline bundles in an air-gapped environment, the folder C:\ProgramData\Trend Micro\Deep Security Agent\relay\bundle\tmp\ includes bundles that will be created in Deep Security Relay Server. By our current design, it will not be automatically deleted, but you can manually delete unnecessary files under the said folder.
Solution Id:
Did this article help you?

Thank you for your feedback!

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.