Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Migrating On-prem OfficeScan XG SP1 or higher to OfficeScan as a Service

    • Updated:
    • 28 Jun 2018
    • Product/Version:
    • OfficeScan as a Service All.All
    • OfficeScan XG.All
    • Platform:
    • Windows 2012
    • Windows 2016
Summary

This article illustrates the On-prem OfficeScan (XG SP1 or higher) to OfficeScan as a Service migration procedures.

Details
Public

On your On-prem OSCE server:

  1. Make sure that the OfficeScan XG server is running on Service Pack 1 (SP1) Build 4345 or higher.

    The Policy Export Tool can be found in the ..\PCCSRV\Admin\Utility\PolicyExportTool folder.

    PolicyExportTool

  2. Open a command line prompt and point to the PolicyExportTool directory.
  3. Run the tool as Admin on the OfficeScan server computer.

    CMD

    CMD

    The tool generates three files:

    • OfficeScan_Server_Migration.zip
      • This contains the Global Settings. Importing more than 1 of these will over-write previous settings. It is recommended to only import this from a single server.
    • OfficeScan_Agent_Policies.zip
      • This contains the policies generated from the settings configured on the OfficeScan Server. This can be imported from multiple On-Prem OfficeScan servers, and each will create the new corresponding policies.
    • OfficeScan_Agent_DLP_Policies.zip
      • This contains the policies generated from the DLP settings configured on the OfficeScan Server. This can imported from multiple On-Prem OfficeScan servers, and each will create the new corresponding policies.

    PolicyExportTool files

On OfficeScan as a Service:

  1. Log in to OfficeScan as a Service.
  2. Import agent settings policy:
    1. Go to Policies > Policy Management.
    2. To import agent policies, choose OfficeScan Agent as the product and click the Import button, then choose the OfficeScan_Agent_Policies.zip (or whatever you've renamed it to) and click Open.

      OSCE SaaS

      New corresponding policies will be generated and displayed. These will default to targets of None, so they will not apply to any agents until an administrator has reviewed the policy and configured the desired targets. The policy names will follow the format of CLN_ServerName_DomainName (where ServerName and DomainName are replaced by their values from the source OfficeScan Server).

    3. Repeat this process for policies from any additional On-Prem servers you wish to import.
  3. Import Agent DLP Policy (if desired):
    1. Go to Policies > Policy Management.
    2. To import agent policies, choose OfficeScan Data Loss Prevention as the product and click the Import button, then choose the OfficeScan_Agent_Policies.zip (or whatever you've renamed it to) and click Open.

      OSCE SaaS

      New corresponding policies will be generated and displayed. These will default to targets of None, so they will not apply to any agents until an administrator has reviewed the policy and configured the desired targets. The policy names will follow the format of DLP_ServerName_DomainName (where ServerName and DomainName are replaced by their values from the source OfficeScan Server).

    3. Repeat this process for policies from any additional On-Prem servers you wish to import.
  4. Import OSCE server settings:
     
    This process only allows for importing the settings of a single OfficeScan Server. Importing multiple will over-write the previous settings.
    1. Go to Administration > Managed Servers.

      OSCE SaaS

    2. Click the link to open the OSCE console.
    3. Go to Administration > Settings > Server Migration in the OSCE console.

      OSCE SaaS

    4. Click the Import Settingsbutton to import OfficeScan_Server_Migration.zip.

      OSCE SaaS

      OSCE SaaS

To move agents from On-Premise OSCE server to OfficeScan as a Service:

  1. Log into OfficeScan as a Service.
  2. Click Administration.
  3. Click Managed Servers.
  4. Click Server Registration.
  5. Verify that the Server Type is OfficeScan. You will see the server name listed there.

    OSCE XG

  6. Go to Agents > Agent Management on the On-Prem OfficeScan Server.
  7. Select agents from the list.
  8. Click Manage Agent Tree > Move Agent.

    OSCE XG

  9. Select “Move selected agent(s) to another OfficeScan server”.
  10. Enter the Server URL that was copied from the OfficeScan as a Service. Use SSL Port 443 and HTTP port 80.

    OSCE XG

  11. Click the Move button.
 
  • To ensure that the agents can be successfully moved to OfficeScan as a Service, make sure that the agents can connect to the Internet.
  • Agent proxy can also be configured to “Use Windows Proxy settings” in Administration > Settings > Proxy then apply the new proxy settings to agents, if the endpoint computers can access the internet.
  • Make sure firewalls are configured to allow for communication with the OfficeScan as a Service servers: Whitelisting OfficeScan as a Service DNS Name and IPs.
Premium
Internal
Rating:
Category:
Migrate
Solution Id:
1118375
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.