Summary
Know how to install patches, service packs, and hot fixes for TMCM that uses a Windows Authentication account to connect to the SQL server.
Details
When installing patches, service packs, and hot fixes, the account used by TMCM is using the account logged in to execute the patches, service packs, and hot fixes. If the account does not have access to the SQL Server, then the patch installation will fail.
If TMCM is using Windows Authentication to connect to the SQL server, use the following installation steps to apply patches, service packs, and hot fixes:
- Verify if TMCM is using Windows Authentication or not.
- Open the Services applet.
- Locate the following services:
- Trend Micro Control Manager
- Trend Micro Management Infrastructure
- Check if the services are using Windows accounts and take note of the account names. This means that they are using Windows authentication.
If the services are using LocalSystem accounts, then they are using SQL Authentication and you do not need to use the steps provided in this KB article.
- Use the CPAU tool to generate authentication files. The CPAU is a freeware tool used to start a process in an alternate context.
- Download the CPAU tool.
- Save the tool in a temporary folder in the TMCM server (e.g. c:\temp).
- Open a command prompt as Administrator.
- Execute the following command:
cpau –u <TMCM service account> -p <Account_Password> -ex <TMCM_patch_sp_hf> -file <command_file> -encFor example:
cpau -u WINDOWS-4QPBQ2O\BBB -p [BBB’s password] -ex tmcm_60_win_en_sp1_r2.exe -file Install.txt –enc
Click image to enlarge.This command will save a service account's details in an encrypted file "Install.txt". This command should only be executed once (if the service account password is not changed).
- Execute the following command to install the TMCM patch, service pack, or hot fix:
Cpau –file <command_file> -dec
Click image to enlarge.
