Deploying ALLOW REGKEY for Microsoft KB4056892 in OfficeScan

You may adopt either one of the following solutions to deploy ALLOW REGKEY for Microsoft KB4056892:

• Deploy ALLOW REGKEY manually:
   

  OfficeScan 11.0 Service Pack 1 (SP1) Critical Patch 6054 or above is required. OfficeScan XG and OfficeScan XG Service Pack 1 (SP1) has this function built in by default.
  1. On the OfficeScan server, open "{OfficeScan server installation folder}\PCCSRV\ofcscan.ini" with Text Editor and add the following key under the [Global Setting] section:

     [Global Setting]
     RegCount=1
     Reg1.Description=Allow Windows Update

     Reg1.Key=!CRYPT!84070708F597BE5199A12DF0527D84E8D566D982932C6EC427AC08F7A530C7403DA50D035913F928CC7D9E0265C9575CFE543A48E17B6382B8F142369FBC7F2487151275E08!732A7737A7568E058E7DE50E10935DCCE337870F5FE4E8178DE942D59362DC34EF971D9131CD4C2901D75B5E05E786060E0C241352E16671F8939376063

     Reg1.Value=0

      

     If there is a pre-configured key in the same section, please append it without overwriting the previous keys. However, change the value of the RegCount parameter.
  2. Save and exit.
  3. Open the OfficeScan web console and go to Agents > Global Agent Settings.
  4. Click the Save button to deploy this setting to agents.
  5. Check if the key was successfully created on the OfficeScan agents:

     Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat\
     Value Name: cadca5fe-87d3-4b96-b7fb-a231484277cc
     Type: REG_DWORD
     Data: 0x00000000

• Manually add ALLOW REGKEY to a target machine:

  Please refer to the following KB article for more details: Important Information for Trend Micro Solutions and Microsoft January 2018 Security Updates (Meltdown and Spectre).

• Apply a critical patch to deploy ALLOW REGKEY automatically:
  • OfficeScan 11.0 SP1 Critical Patch 6496 / Readme
  • OfficeScan XG SP1 Critical Patch 1825_4430 / Readme
   

  OfficeScan XG and OfficeScan XG SP1 use the same critical patch.