Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Enhancement for digital signature checking in OfficeScan

    • Updated:
    • 10 Aug 2018
    • Product/Version:
    • OfficeScan XG.All
    • Platform:
    • Windows 10
    • Windows 2003 32-Bit
    • Windows 2003 64-Bit
    • Windows 2008 32-Bit
    • Windows 2008 64-Bit
    • Windows 2012
    • Windows 2012 Server R2
    • Windows 2016
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8 32-Bit
    • Windows 8 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
Summary

OfficeScan implements a security checking feature for digital signatures in various scenarios. However, in certain environments (e.g. air-gapped), this feature turns out to block program updates due to certificate issues.

Details
Public

Since OfficeScan 11.0 Service Pack 1 Hot Fix Build 6537, OfficeScan XG Service Pack 1 Critical Patch 5180, and later releases, an enhanced security checking mechanism was implemented to avoid the above issue and print error message in the OfficeScan server system event log for easier troubleshooting if digital signature checking fails.

In addition, you can now configure the following parameters to determine intervals of uploading digital signature checking failure logs:

 
Must have OfficeScan 11.0 Service Pack 1 Hot Fix Build 6537, OfficeScan XG Service Pack 1 Critical Patch 5180, or later.
  1. Open the ofcscan.ini file in the \PCCSRV\ folder on the OfficeScan server installation directory.
  2. Under the Global Setting section, manually add the following key and set it to the time interval in seconds.

    [Global Setting]
    DSInvalidLogUploadInterval=3600

Meanwhile, the following parameters used to switch the security checking status will become obsolete to enforce security checking:

  • CheckDigitalSignatureForHotfix
  • CheckDigitalSignatureForUpgrade
  • DOVF
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1120103
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.