This article demonstrates how to create a single MSI OSCE client installation package for OSCE clients' fresh installations and upgrades, then allow users to register these OSCE clients to different specific OSCE servers.
This article enumerates the competitor products that Worry-Free Business Security Services (WFBS-SVC) can automatically uninstall when deploying the agent.
- If the uninstall password protection is enabled, you need to disable it first
- If the competitor product is not on the list or if the WFBS-SVC is unable to automatically remove the existing software installed, please contact Trend Micro Technical Support for further assistance
To create and configure a single MSI OSCE client installation package:
- Do either of the following:
- For OSCE 10.6 Service Pack (SP) 3, apply Hot Fix Build 5415 on the server machine where the MSI package will be created.
- For OSCE 11.0 and later, the feature has been merged, so there is no need to apply the hot fix.
- Open the Ofcscan.ini file in the \PCCSRV\ folder of the OSCE server A.
- Add the following key under "INI_CLIENT_SETUP_SECTION" and set its value to "1":
[INI_CLIENT_SETUP_SECTION]
ForceRefresh=1
BypassServerChecking=1Where:
ForceRefresh=1 will make the OSCE client register to the new server from which the client package was created.
BypassServerChecking=1 enables the client to launch a package created from another OSCE server. - Register the OSCE clients to different specific servers by adding the following keys under "INI_CLIENT_SETUP_SECTION" and assigning the correct values:
[INI_CLIENT_SETUP_SECTION]
AssignedServerNumber= <total number of Assigned Servers>
AssignedServer1=[ClientIPRangeStart],[ClientIPRangeEnd], [Server1][:Port][\Domain1\Domain2]
AssignedServer2=[ClientIPRangeStart],[ClientIPRangeEnd], [Server2][:Port][\Domain1\Domain2]
...
AssignedServerX=[ClientIPRangeStart],[ClientIPRangeEnd], [ServerN][:Port][\Domain1\Domain2]For example:
[INI_CLIENT_SETUP_SECTION] BypassServerChecking=1 AssignedServerNumber=3 AssignedServer1=10.1.1.1,10.1.1.10,10.1.1.5:4343\Domain1\Domain2 AssignedServer2=10.2.1.1,10.2.1.10,OSCE_Srv_2:4343 AssignedServer3=10.3.1.1,10.3.1.100,SrvHostName3:4343
- Save the changes and close Ofcscan.ini.
- Create the MSI installation package.
If you are upgrading clients using the MSI package and the upgraded clients need to be moved to a specified server, manually add the following registry key. Otherwise, proceed to the next step.
Path: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
Key: SupportsAssignedServer
Type: REG_DWORD
Value: 1 - Install or upgrade the OSCE clients using the MSI package.
- The "AssignedServerNumber" key accepts any integer number up to 1000.
- The "AssignedServerX" key allows users to specify a certain IP range of clients that should be registered to the assigned server.
- If the domain is not specified, the client will be registered to the default domain of the server.
- Make sure to put ''[ServerN][:Port][\Domain1\Domain2]'' on the same row with '[ClientIPRangeStart],[ClientIPRangeEnd]'.
- "ServerN" can be assigned an IP address or a hostname of the server.
- If you use the IP address of "ServerN", make sure you can ping the IP address of ''ServerN'' from the OSCE client machine.
- If you use the hostname of "ServerN", make sure you can ping the hostname of ''ServerN'' from the OSCE client machine.
- If the OSCE server A is the 11.0 version or later, Server1, Server2…Server N are also v11.0 or a later version, so make sure they use the same certificate during server installation (OfcNTCer.dat). If not, the client will fail to communicate with the new server.
