Requirements:

• Apex One On-Premise Build 9167 or later
• Apex One as a Service March 2021 build or later

Fresh install:

For Fresh install, run the following command on the endpoint machine:

msiexec.exe /i ApexOne.msi MyServer=”{Target Apex One server : (http port} | (https port)}” MyDomain="{Workgroup\Subdomain}" /Lv+ "{log output path"

For example:

msiexec.exe /i ApexOne.msi MyServer="win2016-x64:8080|4343" MyDomain="Workgroup\Subdomain" /Lv+ "c:\temp\MSI.log"

Program upgrade:

To perform program upgrade, run the following command on the endpoint machine:

msiexec.exe /fov "{Package directory\ApexOne-forupgrade.msi" /L*v "{log output path"

For example:

msiexec.exe /fov "C:\download\b9204.msi" /L*v "c:\temp\MSI.log"

To create and configure a single MSI security agent installation package:

1. Open the Ofcscan.ini file in the \PCCSRV\ folder of the Apex One server A.
2. Add the following key under "INI_CLIENT_SETUP_SECTION" and set its value to "1":

   [INI_CLIENT_SETUP_SECTION]
   ForceRefresh=1
   BypassServerChecking=1

   Where:

   ForceRefresh=1 allows the security agent to register to the new server from which the agent package was created
   BypassServerChecking=1 allows the security agent to launch a package created from another Apex One server

3. Register the Apex One security agents to different specific servers by adding the following keys under "INI_CLIENT_SETUP_SECTION" and assigning the correct values:

   [INI_CLIENT_SETUP_SECTION]
   AssignedServerNumber= <total number of Assigned Servers>
   AssignedServer1=[ClientIPRangeStart],[ClientIPRangeEnd], [Server1][:Port][\Domain1\Domain2]
   AssignedServer2=[ClientIPRangeStart],[ClientIPRangeEnd], [Server2][:Port][\Domain1\Domain2]
   ...
   AssignedServerX=[ClientIPRangeStart],[ClientIPRangeEnd], [ServerN][:Port][\Domain1\Domain2]

   For example:

   [INI_CLIENT_SETUP_SECTION]
   BypassServerChecking=1
   AssignedServerNumber=3
   AssignedServer1=10.1.1.1,10.1.1.10,10.1.1.5:4343\Domain1\Domain2
   AssignedServer2=10.2.1.1,10.2.1.10,OSCE_Srv_2:4343
   AssignedServer3=10.3.1.1,10.3.1.100,SrvHostName3:4343

4. Save the changes and close Ofcscan.ini.
5. Create the MSI installation package.
    

   If you are upgrading security agents using the MSI package and the upgraded agents need to be moved to a specified server, manually add the following registry key. Otherwise, proceed to the next step.

   Path: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
   Key: SupportsAssignedServer
   Type: REG_DWORD
   Value: 1

6. Install or upgrade the security agents using the MSI package.