Installing Control Manager, OfficeScan, and Endpoint Encryption on one server

Prepare the server computer before installing the Trend Micro products. The system requirements for the server computer and necessary supporting programs are as follows:

1. .NET Framework 3.5 SP1
2. Microsoft IIS 6.0 with ASP.NET
3. JRE 6.0 or 7.0 32-bit (for Trend Micro Security for Mac)
4. Microsoft Message Queuing (MSMQ)
5. SQL 2008 Express
6. Create the following two sites in IIS for the Endpoint Encryption Policy Server installation:
   • Admin: port 8080 (recommended)
   • CWS: port 8088 (recommended)

1. Install the Control Manager server.
   1. Download installation package from the Download Center.
   2. Start the installer and accept the license agreement.
   3. On the Product Activation screen, type the provided Activation Code in the appropriate fields and click Next.
   4. On the Select Security Level and Host Address screen, select Fully qualified domain name (FQDN) or host name for the Host address.
   5. Enter the host name of the Control Manager server.
   6. Complete the installation.
2. Install the OfficeScan server.
   1. Download the installation package from the Download Center.
   2. Start the installer and accept the license agreement.
   3. On the Computer Identification screen, select Domain name and type the host name of the OfficeScan server.
   4. On the Product Activation screen, type the provided Activation Code in the appropriate fields and click Next.
   5. On the Administrator Account Password screen, type and confirm the passwords for the web console root account and the client unload and uninstall functions.
   6. On the Anti-spyware Feature screen, select Yes, I would like to enable assessment mode for: 4 week(s).
   7. Complete the installation.
3. Install the plug-in programs in the following order:
   • Intrusion Defense Firewall (IDF)
   • Trend Micro Security for Mac
   • Trend Micro Mobile Security (TMMS)
   • Data Protection
   All plug-in programs follow the same installation flow. Repeat the following steps for each plug-in program.
   1. Open the OfficeScan console and click Plug-in Manager on the main menu.
   2. Go to the plug-in program section and click Download.
   3. When the program is downloaded, click Install Now and agree to the license agreement. The Plug-in Manager screen appears.
   4. Go to the plug-in program section and click Manage Program.
   5. Type or paste the Activation Code in the appropriate fields. The plug-in program introductory screen or management console appears.
4. Install the Endpoint Encryption PolicyServer.
   1. Download the installation package from the Download Center.
   2. Double-click the PolicyServerInstaller.exe file and accept the license agreement.
   3. On the Database Administrator Logon screen, provide the SQL server logon credentials and the SQL server IP address\SQL instance name.
   4. On the Create Database Logon screen, create a new user account for the SQL server.
   5. On the Web Service Install Location screen, select the preconfigured site (Admin) for the Policy Server.
   6. On the Client Web Service Location screen, select the preconfigured site (CWS) for the Endpoint Encryption clients.
   7. On the Create Enterprise Name and Administrator Logon screen, provide the Enterprise name and specify logon credentials for the Endpoint Encryption administrator.
       

      The administrator password must be at least 6 characters in length.
   8. Complete the installation and restart the server.
5. Install the Policy Server MMC.
   1. Double-click thePolicyServerMMCSnapinSetup.msi file.
   2. Accept all default settings.
   3. Complete the installation and restart the server.
6. Log on the Endpoint Encryption Policy Server using the administrator credentials specified during the installation and specify local host 8080 for the server.
7. Create a new group and add an Administrator user to the group.
8. On the targeted client computer, turn off the Windows Firewall.
9. Install File Encryption on the client computer.
   1. Download the installation package from the Download Center.
   2. Double-click the appropriate File Encryption installation file (32-bit or 64-bit version).
   3. Complete the installation and restart the computer.
   4. Provide the user name and credentials of the new user added to the Policy Server in step 7, the Policy Server address (including the CWS site's port number), and the Enterprise name.
10. Install Full Disk Encryption on the client computer.
    1. Download the installation package from the Download Center.
    2. Double-click the TMFDEInstall.exe file.
    3. Select Managed installation (server based) and click Next.
    4. Provide the user name and credentials of the new user added to the Policy Server in step 7, the Policy Server address (including the CWS site's port number), and the Enterprise name.
    5. Complete the installation and restart the computer.
    6. Log on the client computer using the user name and credentials specified in step 7.