Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Quick migration guide for Trend Micro Apex One™

    • Updated:
    • 14 Oct 2019
    • Product/Version:
    • Apex Central 2019
    • Apex Central All.All
    • Apex One 2019
    • Apex One All.All
    • OfficeScan 11.0
    • OfficeScan XG
    • Platform:
    • N/A N/A
Summary

Upgrading to Trend Micro Apex One™ allows you to enable extended endpoint features like Application Control, Endpoint Sensor, and Vulnerability Protection — all within one product.

It redefines endpoint security with its breadth of capabilities delivered as a single agent, with consistency across SaaS and on-premises deployments. This offers enhanced automated detection and response and actionable insights that maximize security for customers.

This article provides an overview of multiple scenarios and recommended upgrade plans. For a detailed guide, please refer to the Install and Upgrade Guide in the Deployment Suggestions Based on Product Features section below.

Details
Public

Supported Upgrade Path

Trend Micro Apex One™ supports upgrades from the following versions:

  • OfficeScan XG Service Pack 1
  • OfficeScan XG
  • OfficeScan 11.0 Service Pack 1

Trend Micro Apex Central™ supports upgrades from the following versions:

  • Control Manager 6.0 Service Pack 3 Patch 3
  • Control Manager 7.0
  • Control Manager 7.0 Patch 1

Trend Micro highly recommends applying all available patches and hot fixes to your current Apex One, OfficeScan, Apex Central, or Control Manager server before performing an upgrade.

System Requirements

License

  • A separate license is needed to enable the Endpoint Sensor feature.
  • For Smart Protection Suite licenses issued after March 15, all Trend Micro Apex One™ features can be enabled (except Endpoint Sensor).
  • For Smart Protection Suite licenses issued prior to March 15, please use the Trend Micro Application Control and Vulnerability Protection licenses included in the suite to active the extended features on Apex One.
  • Existing non-expired licenses for standalone products like Trend Micro Application Control, Vulnerability Protection, and Endpoint Sensor may also be used to activate extended features on Apex One.
  • For non-Smart Protection Suite customers who do not have Trend Micro Application Control or Vulnerability Protection licenses, Apex One extended features cannot be enabled.

Features

Trend Micro Apex Central™ is required to enable additional features of Apex One, such as:

  • Apex One Application Control
  • Apex One Endpoint Sensor
  • Apex One Vulnerability Protection
  • Managed Detection and Response Service
  • Sandbox as a Service

Supported Operating Systems

The Trend Micro Apex One™ agent supports installation on the following Windows OS:

  • Windows 7 SP1
  • Windows 8.1
  • Windows 10
  • Windows 2008 R2 SP1
  • Windows 2012
  • Windows 2012 R2
  • Windows 2016
  • Windows 2019
  • Embedded/IOT
    • Windows Embedded POSReady 7
    • Windows 7 Embedded
    • Windows 8.1 Embedded
    • Windows 10 IoT

Trend Micro highly recommends applying all available patches and hot fixes on Windows machines before installing or upgrading to Apex One. Refer to this link for Windows 10 and Apex One compatibility: Compatibility between Windows 10 and OfficeScan/Apex One.

System Requirements

Trend Micro Apex One™ agent recommended system requirements:

CPUMemoryDisk Space
Intel 64 Processor2GB3GB
AMD™ 64 processor

Resource spikes may occur if a large number of applications, whether native Windows or third-party, are running simultaneously on a computer. If the target machine is already running low on memory and disk space, the Apex One administrator should be critical in upgrading the necessary hardware components prior to Apex One installation.

Trend Micro recommends to have more than sufficient memory and hard disk space to ensure adequate Apex One performance during extensive scanning operations. It is best to commit the recommended memory and disk space allocation exclusive to Apex One especially when the customer intends to enable all additional product features.

For the detailed requirements, please refer to Chapter 3 Apex One Security Agent System Requirements available in this link.

Supported Upgrade Path

Trend Micro Apex One™ supports upgrades from the following versions:

  • OfficeScan XG Service Pack 1
  • OfficeScan XG
  • OfficeScan 11.0 Service Pack 1

Features

Trend Micro Apex One™ additional features include:

  • Apex One Application Control
  • Apex One Data Loss Prevention (DLP)
  • Apex One Endpoint Sensor
  • Apex One Vulnerability Protection

For support assistance, please contact Trend Micro Technical Support.

This section provides information on the number of supported agents depending on enabled features.

 
  • The sizing data below is for reference only. It is possible for Apex One to manage more than the upper bound recommendation below if using higher spec machines. Customers can gradually increase number of endpoints while observing the server performance data. Actual sizing limit can vary depending on product configurations and customer environment factors.
  • Sizing data below takes into considerations that both Vulnerability Protection and Application Control features are enabled.
  • Apex One is expected to provide a comparable experience running on the same hardware as OfficeScan XG if the new advanced features (i.e. Vulnerability Protection, Endpoint Sensor, Application Control) are not enabled.
Apex One without enabling Endpoint Sensor feature
Endpoint CountCPURAMSQLSQL Server SpecSmart Protection Server
up to 3,0008 cores8GBExpress/StandaloneN/AIntegrated/Standalone
up to 10,0008 cores32GB2016 Standalone4 cores, 8GB RAMStandalone
up to 25,00016 cores64GB2016 Standalone4 cores, 8GB RAMStandalone
25,000 and upMultiple Apex One Servers are needed to distribute load.
Apex Central can be used to manage multiple Apex One servers.
Please refer to the Apex Central sizing data below for more details.
Apex One with enabled Endpoint Sensor feature
Endpoint CountCPURAMMaximum Memory Allocation SettingSQLSQL Server SpecMaximum Metadata Storage SettingSmart Protection Server
up to 3,0008 cores32GBRecommended value: 20GB2016 SP1 or higher
(Standalone)
4 cores, 16GB RAMRecommended value: 120GB per monthStandalone
up to 10,00016 cores96GBRecommended value: 48GB2016 SP1 or higher
(Standalone)
4 cores, 32GB RAMRecommended value: 450GB per monthStandalone
10,000 and upMultiple Apex One Servers are needed to distribute load.
Apex Central can be used to manage multiple Apex One servers.
Please refer to the Apex Central sizing data below for more details.
  • Above estimates are for Apex One Security Agents running on Windows platform.
  • Maximum metadata storage and Maximum memory allocation settings are configured on the Apex Central console in Apex One Server policies. The default 4GB maximum memory allocation settings are recommended for up to 600 endpoint agents.

    Endpoint Sensor

Apex Central
Overall Endpoint CountCPURAMSQLSQL Server Spec
up to 5,0008 cores12GBExpress/StandaloneN/A
up to 20,0008 cores8GBStandalone8 cores, 12GB RAM
up to 50,0008 cores8GBStandalone12 cores, 16GB RAM
up to 200,00012 cores24GBStandalone24 cores, 80GB RAM (Enterprise SSD)

This section provides an overview of the migration flow, depending on which features the user intends to enable.

 
  • Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
  • No intention to enable extended features like Application Control, Endpoint Sensor, and Vulnerability Protection; or
  • Prefer to continue using standalone version of Trend Micro Application Control, Endpoint Sensor, and Vulnerability Protection

Recommended Upgrade Plan Overview

  • Upgrade OfficeScan server to Apex One
  • Upgrade Control Manager to Apex Central server [Recommended]
  • Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
  • Planning to enable extended features Application Control and Vulnerability Protection; and
  • Currently using standalone version of Application Control and Vulnerability Protection

Recommended Upgrade Plan Overview

  • Upgrade OfficeScan server to Apex One
     
    Upgrading an OfficeScan server to Apex One will not affect the existing installation of the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection. However, Apex One agents will automatically uninstall the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection when these functions are enabled.
  • Upgrade Control Manager to Apex Central server [Required]
  • Enable Application Control and Vulnerability Protection features via Apex Central Policy
  • Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
  • Planning to enable extended features Endpoint Sensor, Application Control, and Vulnerability Protection; and
  • Currently using standalone version of Endpoint Sensor, Application Control, and Vulnerability Protection

Recommended Upgrade Plan Overview

  • Prepare SQL Server 2016 SP1 (Standard/Enterprise only) or higher with Full-Text and Semantic Extractions for Search features enabled [Required]
  • Upgrade OfficeScan server to Apex One
 
Upgrading an OfficeScan server to Apex One will not affect the existing installation of the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection. However, Apex One agents will automatically uninstall the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection when these functions are enabled.
  • Upgrade Control Manager to Apex Central server [Required]
  • Input Endpoint Sensor License on Apex Central [Required]
  • Enable Endpoint Sensor, Application Control, and Vulnerability Protection feature via Apex Central Policy
Premium
Internal
Rating:
Category:
Configure; Deploy; Upgrade
Solution Id:
1122308
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.