Microsoft KB4056892 is accessible as of Janurary 4, 2018. This update checks the availability of a specific registry key before applying it to a target machine. Below, you will find information on how to deploy the ALLOW REGKEY.
For more information about Microsoft KB4056892, please refer to the following KB article: Important Information for Trend Micro Solutions and Microsoft January 2018 Security Updates (Meltdown and Spectre).
You may adopt either one of the following solutions to deploy ALLOW REGKEY for Microsoft KB4056892:
- Deploy ALLOW REGKEY manually: OfficeScan 11.0 Service Pack 1 (SP1) Critical Patch 6054 or above is required. OfficeScan XG and OfficeScan XG Service Pack 1 (SP1) has this function built in by default.
- On the OfficeScan server, open "{OfficeScan server installation folder}\PCCSRV\ofcscan.ini" with Text Editor and add the following key under the [Global Setting] section:
[Global Setting]
RegCount=1
Reg1.Description=Allow Windows UpdateReg1.Key=!CRYPT!84070708F597BE5199A12DF0527D84E8D566D982932C6EC427AC08F7A530C7403DA50D035913F928CC7D9E0265C9575CFE543A48E17B6382B8F142369FBC7F2487151275E08!732A7737A7568E058E7DE50E10935DCCE337870F5FE4E8178DE942D59362DC34EF971D9131CD4C2901D75B5E05E786060E0C241352E16671F8939376063
Reg1.Value=0
If there is a pre-configured key in the same section, please append it without overwriting the previous keys. However, change the value of the RegCount parameter. - Save and exit.
- Open the OfficeScan web console and go to Agents > Global Agent Settings.
- Click the Save button to deploy this setting to agents.
- Check if the key was successfully created on the OfficeScan agents:
Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat\
Value Name: cadca5fe-87d3-4b96-b7fb-a231484277cc
Type: REG_DWORD
Data: 0x00000000
- On the OfficeScan server, open "{OfficeScan server installation folder}\PCCSRV\ofcscan.ini" with Text Editor and add the following key under the [Global Setting] section:
- Manually add ALLOW REGKEY to a target machine:
Please refer to the following KB article for more details: Important Information for Trend Micro Solutions and Microsoft January 2018 Security Updates (Meltdown and Spectre).
- Apply a critical patch to deploy ALLOW REGKEY automatically: OfficeScan XG and OfficeScan XG SP1 use the same critical patch.