Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Quick migration guide for Trend Micro Apex One™

    • Updated:
    • 9 May 2019
    • Product/Version:
    • Apex Central All.All
    • Apex One All.All
    • Platform:
    • N/A N/A
Summary

Upgrading to Trend Micro Apex One™ allows you to enable extended endpoint features like Application Control, Endpoint Sensor, and Vulnerability Protection — all within one product.

This article provides an overview of multiple scenarios and recommended upgrade plans. For a detailed guide, please refer to the Install and Upgrade Guide in the Deployment Suggestions Based on Product Features section below.

Details
Public

Supported Upgrade Path

Trend Micro Apex One™ supports upgrades from the following versions:

  • OfficeScan XG Service Pack 1
  • OfficeScan XG
  • OfficeScan 11.0 Service Pack 1

Trend Micro Apex Central™ supports upgrades from the following versions:

  • Control Manager 6.0 Service Pack 3 Patch 3
  • Control Manager 7.0
  • Control Manager 7.0 Patch 1

Trend Micro highly recommends applying all available patches and hot fixes to your current Apex One, OfficeScan, Apex Central, or Control Manager server before performing an upgrade.

System Requirements

License

  • A separate license is needed to enable the Endpoint Sensor feature.
  • For Smart Protection Suite licenses issued after March 15, all Trend Micro Apex One™ features can be enabled (except Endpoint Sensor).
  • For Smart Protection Suite licenses issued prior to March 15, please use the Trend Micro Application Control and Vulnerability Protection licenses included in the suite to active the extended features on Apex One.
  • Existing non-expired licenses for standalone products like Trend Micro Application Control, Vulnerability Protection, and Endpoint Sensor may also be used to activate extended features on Apex One.
  • For non-Smart Protection Suite customers who do not have Trend Micro Application Control or Vulnerability Protection licenses, Apex One extended features cannot be enabled.

Features

Trend Micro Apex Central™ is required to enable additional features of Apex One, such as:

  • Apex One Application Control
  • Apex One Endpoint Sensor
  • Apex One Vulnerability Protection
  • Managed Detection and Response Service
  • Sandbox as a Service

This section provides information on the number of supported agents depending on enabled features.

Apex One without enabling Endpoint Sensor feature
Endpoint CountCPURAMSQLSQL Server SpecSmart Protection Server
up to 3,0008 cores8GBExpress/StandaloneN/AIntegrated/Standalone
up to 10,00012 cores32GB2016 Standalone4 cores, 8GB RAMStandalone
up to 25,00040 cores128GB2016 Standalone4 cores, 8GB RAMStandalone
25,000 and upMultiple Apex One Servers are needed to distribute load.
Apex Central can be used to manage multiple Apex One servers.
Please refer to the Apex Central sizing data below for more details.
Apex One with enabled Endpoint Sensor feature
Endpoint CountCPURAMSQLSQL Server SpecMaximum Metadata Storage SettingMaximum Memory Allocation SettingSmart Protection Server
up to 3,00012 cores32GB2016 SP1 or higher
(Standalone)
4 cores, 16GB RAMRecommended value: 120GB per monthRecommended value: 20GBStandalone
up to 10,00040 cores128GB2016 SP1 or higher
(Standalone)
4 cores, 32GB RAMRecommended value: 450GB per monthRecommended value: 48GBStandalone
10,000 and upMultiple Apex One Servers are needed to distribute load.
Apex Central can be used to manage multiple Apex One servers.
Please refer to the Apex Central sizing data below for more details.
Maximum metadata storage and Maximum memory allocation settings are configured on the Apex Central console in Apex One Server policies. The default 4GB maximum memory allocation settings are recommended for up to 600 endpoint agents.

Endpoint Sensor

Apex Central
Overall Endpoint CountCPURAMSQLSQL Server Spec
up to 5,0008 cores12GBExpress/StandaloneN/A
up to 20,0008 cores8GBStandalone8 cores, 12GB RAM
up to 50,0008 cores8GBStandalone12 cores, 16GB RAM
up to 200,00012 cores24GBStandalone24 cores, 80GB RAM (Enterprise SSD)

This section provides an overview of the migration flow, depending on which features the user intends to enable.

 
  • Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
  • No intention to enable extended features like Application Control, Endpoint Sensor, and Vulnerability Protection; or
  • Prefer to continue using standalone version of Trend Micro Application Control, Endpoint Sensor, and Vulnerability Protection

Recommended Upgrade Plan Overview

  • Upgrade OfficeScan server to Apex One
  • Upgrade Control Manager to Apex Central server [Recommended]
  • Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
  • Planning to enable extended features Application Control and Vulnerability Protection; and
  • Currently using standalone version of Application Control and Vulnerability Protection

Recommended Upgrade Plan Overview

  • Upgrade OfficeScan server to Apex One
     
    Upgrading an OfficeScan server to Apex One will not affect the existing installation of the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection. However, Apex One agents will automatically uninstall the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection when these functions are enabled.
  • Upgrade Control Manager to Apex Central server [Required]
  • Enable Application Control and Vulnerability Protection features via Apex Central Policy
  • Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
  • Planning to enable extended features Endpoint Sensor, Application Control, and Vulnerability Protection; and
  • Currently using standalone version of Endpoint Sensor, Application Control, and Vulnerability Protection

Recommended Upgrade Plan Overview

    • Prepare SQL Server 2016 SP1 (Standard/Enterprise only) or higher with Full-Text and Semantic Extractions for Search features enabled [Required]
    • Upgrade OfficeScan server to Apex One
 
Upgrading an OfficeScan server to Apex One will not affect the existing installation of the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection. However, Apex One agents will automatically uninstall the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection when these functions are enabled.
  • Upgrade Control Manager to Apex Central server [Required]
  • Input Endpoint Sensor License on Apex Central [Required]
  • Enable Endpoint Sensor, Application Control, and Vulnerability Protection feature via Apex Central Policy
Premium
Internal
Rating:
Category:
Configure; Deploy; Upgrade
Solution Id:
1122308
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.