Summary
Trend Micro has released new versions of the Trend Micro Deep Security Agent (DSA) to address incompatibilities introduced by smBIOS 2.7 of AWS Elastic Compute Cloud (EC2) Windows and Linux Amazon Machine Images (AMIs).
The following criteria are required for your deployment to be affected:
- You have one (1) or more AWS Cloud Connectors configured
- You have activated (or re-activated) computers starting in October 2017
- You are using an affected agent (see details below)
Details
Updated Oct. 31, 2017 @ 6:00 PM (GMT)
Recently, AWS introduced a change to smBIOS version 2.7 for EC2. Shortly after the change was introduced, Trend Micro began to receive customer inquiries and incident reports that showed new EC2 instances using the latest smBIOS were not being properly protected by Trend Micro Deep Security agents.
Computers that failed to be correctly identified will activate outside of an AWS cloud connector, will not be assigned EC2 metadata, and may not be assigned the expected security policy. In these cases assigning security policy or relay groups based on EC2 metadata - using Event Based Tasks (EBT's) for example - will be incorrect.
Computers that failed to be correctly identified will activate outside of an AWS cloud connector, will not be assigned EC2 metadata, and may not be assigned the expected security policy. In these cases assigning security policy or relay groups based on EC2 metadata - using Event Based Tasks (EBT's) for example - will be incorrect.
Trend Micro has identified the root cause and has released new versions of the DSA starting on October 20, 2017, that resolve this incompatibility.
Existing EC2 instances with smBIOS 2.4 that have Deep Security agents already installed are unaffected.
Existing EC2 instances with smBIOS 2.4 that have Deep Security agents already installed are unaffected.
Updated Deep Security Agents
Trend Micro has released the following updated Deep Security Agents to address the issue:
| Product | Updated version | Notes | Platform | Availability |
|---|---|---|---|---|
| Deep Security Agent | Version 10.1 CP (Feature Release) | Readme | All | Now |
| Version 10.0 Update 5 CP | Readme | All | Now | |
| Version 9.6 SP1 P1 Update 12 CP | Readme | All | Now |
