Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How to import Endpoint Application Control (EAC) SSL Certificate to endpoints

    • Updated:
    • 24 Oct 2016
    • Product/Version:
    • Endpoint Application Control 2.0
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Standard
    • Windows 2008 Datacenter 64-bit
    • Windows 2008 Server R2 Datacenter
    • Windows 2008 Server R2 Enterprise
    • Windows 2012 Datacenter
    • Windows 2012 Server R2
Summary

Know how to to import Trend Micro Endpoint Application Control SSL Certificate in any of the following methods:

  • Per device or machine via Microsoft Management Console (MMC)
  • Multiple devices or machines via Group Policy Object (GPO)
Details
Public

To Import SSL Certificate via MMC:

  1. Login to EAC Server machine.
  2. Go to EAC %ProgramFiles% folder and copy the SSL Certificate .PEM file to a shared location, or to the local temporary folder of the target computer.
  3. Login to the target computer and open MMC (mmc.exe).
  4. In the MMC, click File menu and select Add/Remove Snap-in.
  5. Select Certificates and click Add> button to move it to the Selected snap-ins: column.
  6. Select Computer account and click Next button.
  7. Select Local Computer: (the computer this console is running on) and click Finish.
  8. Click OK to go back to MMC.
  9. Expand the Certificates (Local Computer) and go to Trusted Root Certificate > Certificates folder.
  10. Click Action menu and go to All Tasks > Import...
  11. Click Next to follow steps in the Certificate Import Wizard.
  12. Browse the file name of the SSL Cert .PEM file that was copied in step #2. Click Next>twice.
     
    Change the file type to display with the "All Files (*.*)" to be able to view the TMAC_CA_Cert.pem certificate file.
  13. Click Finish to close the wizard and OK when the "The import was successful." dialog box appears.
  14. In the Certificates folder, look for the "Trend Micro internal CA" to verify if SSL Certificate import is successful or not.

To Import SSL Certificate via GPO:

  1. Login to EAC Server machine.
  2. Go to EAC %ProgramFiles% folder and copy the SSL Certificate .PEM file to a shared location or to the local temporary folder of the Domain Controller.
  3. Log on to the Domain Controller.
  4. Click Start, point to Administrative Tools, and then click Group Policy Management.
  5. In the console tree, double-click Group Policy Objects in the forest and domain containing the Default Domain Policy Group Policy object (GPO) that you want to edit.
  6. Right-click the Default Domain Policy GPO, and then click Edit.
  7. In the Group Policy Management Console (GPMC), go to Computer Configuration > Windows Settings > Security Settings, and then click Public Key Policies.
  8. Right-click the Trusted Root Certification Authorities store.
  9. Click Import and follow the steps in the Certificate Import Wizard to import the certificates.
  10. Browse the file name of the SSL Cert .PEM file that was copied in step #2. Click Next>twice.
     
    Change the file type to display with the "All Files (*.*)" to be able to view the TMAC_CA_Cert.pem certificate file.
  11. Click Finish to close the wizard and OK when the "The import was successful." dialog box appears.
  12. Login to one of the domain computers and look for the "Trend Micro internal CA" in the Certificates MMC to verify if SSL Certificate import is successful or not.
Premium
Internal
Rating:
Category:
Configure; Deploy; Register
Solution Id:
1115573
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.