Summary
After Deep Security Agent installation, “Anti-Malware Engine Offline” appears in the Deep Security Manager (DSM) console.
When running the following commands:
- sc query tmactmon
- sc query tmevtmgr
- sc query tmcomm
...you see that the tmactmon, tmevtmgr, and tmcomm drivers are not installed.
Details
The issue occurs because the tmactmon, tmevtmgr, and tmcomm drivers were not installed due to the “Turn Off Automatic Root Certificate Update” policy in the GPO. The policy prevented the machine from downloading the root certificate used to sign the drivers, causing the installation to fail.
To resolve the issue:
- Open gpedit.msc using the command line.
- Expand Administrative Templates >System > Internet Communication Management > Internet Communication Settings.
- Locate “Turn Off Automatic Root Certificate Update”.
- Set it to Not Configured or disable it.
- Install the Deep Security Agent.
