Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Installing Control Manager, OfficeScan, and Endpoint Encryption on one server

    • Updated:
    • 30 Jan 2015
    • Product/Version:
    • Control Manager 6.0
    • Endpoint Encryption 3.0 DriveArmor
    • Endpoint Encryption 3.0 File Encryption
    • Endpoint Encryption 3.0 Full Disk Encrypti
    • Endpoint Encryption 3.0 KeyArmor
    • Endpoint Encryption 3.1 Full Disk Encrypti
    • Endpoint Encryption 3.1 PolicyServer
    • Endpoint Encryption 5.0
    • OfficeScan 10.6
    • OfficeScan 11.0
    • Platform:
    • Windows 2008 Server R2
    • Windows 7 32-bit
    • Windows 7 64-bit
Summary
Install Control Manager (TMCM), OfficeScan (OSCE) and Endpoint Encryption on a single server.
Details
Public
 
Although it is possible to install all products on a single server computer, we highly recommend to install on at least two servers in any production environment. Installing all products on a single server requires more system resources and may result in reduced performance.
Single Server Installation
Click image to enlarge.

Prepare the server computer before installing the Trend Micro products. The system requirements for the server computer and necessary supporting programs are as follows:

Single Server System Recommendations
System ResourceRecommended
Processor2 GHz dual processor
RAM4 GB
Hard disk space40 GB
Operating systemWindows Server 2003 32-bit
Necessary programs to be installed and configured before the installation.
  1. .NET Framework 3.5 SP1
  2. Microsoft IIS 6.0 with ASP.NET
  3. JRE 6.0 or 7.0 32-bit (for Trend Micro Security for Mac)
  4. Microsoft Message Queuing (MSMQ)
  5. SQL 2008 Express
  6. Create the following two sites in IIS for the Endpoint Encryption Policy Server installation:
    • Admin: port 8080 (recommended)
    • CWS: port 8088 (recommended)
 
Trend Micro recommends disabling Internet Explorer Enhanced Security Configuration (IE ESC) using the Microsoft Management Console (MMC).
Full Disk Encryption client System Recommendations
System ResourceRecommended
Processor2 GHz dual processor
RAM1 GB
Hard disk space30 GB
Operating systemWindows 7 32-bit or 64-bit
To install the products on a single server:
 
Unless otherwise specified, accept the default settings and continue.
  1. Install the Control Manager server.
    1. Download installation package from the Download Center.
    2. Start the installer and accept the license agreement.
    3. On the Product Activation screen, type the provided Activation Code in the appropriate fields and click Next.
    4. On the Select Security Level and Host Address screen, select Fully qualified domain name (FQDN) or host name for the Host address.
    5. Enter the host name of the Control Manager server.
    6. Complete the installation.
  2. Install the OfficeScan server.
    1. Download the installation package from the Download Center.
    2. Start the installer and accept the license agreement.
    3. On the Computer Identification screen, select Domain name and type the host name of the OfficeScan server.
    4. On the Product Activation screen, type the provided Activation Code in the appropriate fields and click Next.
    5. On the Administrator Account Password screen, type and confirm the passwords for the web console root account and the client unload and uninstall functions.
    6. On the Anti-spyware Feature screen, select Yes, I would like to enable assessment mode for: 4 week(s).
    7. Complete the installation.
  3. Install the plug-in programs in the following order:
    • Intrusion Defense Firewall (IDF)
    • Trend Micro Security for Mac
    • Trend Micro Mobile Security (TMMS)
    • Data Protection
    All plug-in programs follow the same installation flow. Repeat the following steps for each plug-in program.
    1. Open the OfficeScan console and click Plug-in Manager on the main menu.
    2. Go to the plug-in program section and click Download.
    3. When the program is downloaded, click Install Now and agree to the license agreement. The Plug-in Manager screen appears.
    4. Go to the plug-in program section and click Manage Program.
    5. Type or paste the Activation Code in the appropriate fields. The plug-in program introductory screen or management console appears.
  4. Install the Endpoint Encryption PolicyServer.
    1. Download the installation package from the Download Center.
    2. Double-click the PolicyServerInstaller.exe file and accept the license agreement.
    3. On the Database Administrator Logon screen, provide the SQL server logon credentials and the SQL server IP address\SQL instance name.
    4. On the Create Database Logon screen, create a new user account for the SQL server.
    5. On the Web Service Install Location screen, select the preconfigured site (Admin) for the Policy Server.
    6. On the Client Web Service Location screen, select the preconfigured site (CWS) for the Endpoint Encryption clients.
    7. On the Create Enterprise Name and Administrator Logon screen, provide the Enterprise name and specify logon credentials for the Endpoint Encryption administrator.
       
      The administrator password must be at least 6 characters in length.
    8. Complete the installation and restart the server.
  5. Install the Policy Server MMC.
    1. Double-click thePolicyServerMMCSnapinSetup.msi file.
    2. Accept all default settings.
    3. Complete the installation and restart the server.
  6. Log on the Endpoint Encryption Policy Server using the administrator credentials specified during the installation and specify local host 8080 for the server.
  7. Create a new group and add an Administrator user to the group.
  8. On the targeted client computer, turn off the Windows Firewall.
  9. Install File Encryption on the client computer.
    1. Download the installation package from the Download Center.
    2. Double-click the appropriate File Encryption installation file (32-bit or 64-bit version).
    3. Complete the installation and restart the computer.
    4. Provide the user name and credentials of the new user added to the Policy Server in step 7, the Policy Server address (including the CWS site's port number), and the Enterprise name.
  10. Install Full Disk Encryption on the client computer.
    1. Download the installation package from the Download Center.
    2. Double-click the TMFDEInstall.exe file.
    3. Select Managed installation (server based) and click Next.
    4. Provide the user name and credentials of the new user added to the Policy Server in step 7, the Policy Server address (including the CWS site's port number), and the Enterprise name.
    5. Complete the installation and restart the computer.
    6. Log on the client computer using the user name and credentials specified in step 7.
For more information about intergrating Endpoint Encryption 5.0 and OfficeScan, refer to the article entitled About Trend Micro OfficeScan Integration.
Premium
Internal
Rating:
Category:
Configure; Install
Solution Id:
1097571
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.