Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Creating and configuring an MSI Apex One security agent installation package for fresh installations and upgrades

    • Updated:
    • 2 Feb 2021
    • Product/Version:
    • Apex One All
    • OfficeScan XG
    • Platform:
Summary

This article demonstrates how to create a single MSI Apex One security agent installation package for fresh installations, upgrades, or migrations to different Apex One servers.

Details
Public

Requirements:

  • Apex One On-Premise Build 9167 or later
  • Apex One as a Service March 2021 build or later

Run the following command on the endpoint machine:

msiexec.exe /i ApexOne.msi MyServer=”{Target Apex One server : (http port} | (https port)}” MyDomain="{Workgroup\Subdomain}" /Lv+ "{log output path"

For example:

msiexec.exe /i ApexOne.msi MyServer="win2016-x64:8080|4343" MyDomain="Workgroup\Subdomain" /Lv+ "c:\temp\MSI.log"

To create and configure a single MSI security agent installation package:

  1. Open the Ofcscan.ini file in the \PCCSRV\ folder of the Apex One server A.
  2. Add the following key under "INI_CLIENT_SETUP_SECTION" and set its value to "1":

    [INI_CLIENT_SETUP_SECTION]
    ForceRefresh=1
    BypassServerChecking=1

    Where:

    ForceRefresh=1 allows the security agent to register to the new server from which the agent package was created
    BypassServerChecking=1 allows the security agent to launch a package created from another Apex One server

  3. Register the Apex One security agents to different specific servers by adding the following keys under "INI_CLIENT_SETUP_SECTION" and assigning the correct values:

    [INI_CLIENT_SETUP_SECTION]
    AssignedServerNumber= <total number of Assigned Servers>
    AssignedServer1=[ClientIPRangeStart],[ClientIPRangeEnd], [Server1][:Port][\Domain1\Domain2]
    AssignedServer2=[ClientIPRangeStart],[ClientIPRangeEnd], [Server2][:Port][\Domain1\Domain2]
    ...
    AssignedServerX=[ClientIPRangeStart],[ClientIPRangeEnd], [ServerN][:Port][\Domain1\Domain2]

    For example:

    [INI_CLIENT_SETUP_SECTION]
    BypassServerChecking=1
    AssignedServerNumber=3
    AssignedServer1=10.1.1.1,10.1.1.10,10.1.1.5:4343\Domain1\Domain2
    AssignedServer2=10.2.1.1,10.2.1.10,OSCE_Srv_2:4343
    AssignedServer3=10.3.1.1,10.3.1.100,SrvHostName3:4343

  4. Save the changes and close Ofcscan.ini.
  5. Create the MSI installation package.
     
    If you are upgrading security agents using the MSI package and the upgraded agents need to be moved to a specified server, manually add the following registry key. Otherwise, proceed to the next step.

    Path: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
    Key: SupportsAssignedServer
    Type: REG_DWORD
    Value: 1

  6. Install or upgrade the security agents using the MSI package.
 
  • The "AssignedServerNumber" key accepts any integer number up to 1000.
  • The "AssignedServerX" key allows users to specify a certain IP range of agent that should be registered to the assigned server.
  • If the domain is not specified, the client will be registered to the default domain of the server.
  • Make sure to put ''[ServerN][:Port][\Domain1\Domain2]'' on the same row with '[ClientIPRangeStart],[ClientIPRangeEnd]'.
  • "ServerN" can be assigned an IP address or a hostname of the server.
  • If you use the IP address of "ServerN", make sure you can ping the IP address of ''ServerN'' from the security agent machine.
  • If you use the hostname of "ServerN", make sure you can ping the hostname of ''ServerN'' from the security agent machine.
  • Make sure the new Apex One server uses the same certificate during server installation (OfcNTCer.dat). If not, security will fail to communicate with the new server.
Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
1113713
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.