Supported Upgrade Path
Trend Micro Apex One™ supports upgrades from the following versions:
- OfficeScan XG Service Pack 1
- OfficeScan XG
- OfficeScan 11.0 Service Pack 1
Trend Micro Apex Central™ supports upgrades from the following versions:
- Control Manager 6.0 Service Pack 3 Patch 3
- Control Manager 7.0
- Control Manager 7.0 Patch 1
Trend Micro highly recommends applying all available patches and hot fixes to your current Apex One, OfficeScan, Apex Central, or Control Manager server before performing an upgrade.
System Requirements
- Apex One System Requirements
The upgrade will not proceed if a previous version is installed on a non-supported OS or is managing non-supported agent platforms.
- Apex Central System Requirements
License
- A separate license is needed to enable the Endpoint Sensor feature.
- For Smart Protection Suite licenses issued after March 15, all Trend Micro Apex One™ features can be enabled (except Endpoint Sensor).
- For Smart Protection Suite licenses issued prior to March 15, please use the Trend Micro Application Control and Vulnerability Protection licenses included in the suite to active the extended features on Apex One.
- Existing non-expired licenses for standalone products like Trend Micro Application Control, Vulnerability Protection, and Endpoint Sensor may also be used to activate extended features on Apex One.
- For non-Smart Protection Suite customers who do not have Trend Micro Application Control or Vulnerability Protection licenses, Apex One extended features cannot be enabled.
Features
Trend Micro Apex Central™ is required to enable additional features of Apex One, such as:
- Apex One Application Control
- Apex One Endpoint Sensor
- Apex One Vulnerability Protection
- Managed Detection and Response Service
- Sandbox as a Service
Supported Operating Systems
The Trend Micro Apex One™ agent supports installation on the following Windows OS:
- Windows 7 SP1
- Windows 8.1
- Windows 10
- Windows 2008 R2 SP1
- Windows 2012
- Windows 2012 R2
- Windows 2016
- Windows 2019
- Embedded/IOT
- Windows Embedded POSReady 7
- Windows 7 Embedded
- Windows 8.1 Embedded
- Windows 10 IoT
Trend Micro highly recommends applying all available patches and hot fixes on Windows machines before installing or upgrading to Apex One. Refer to this link for Windows 10 and Apex One compatibility: Compatibility between Windows 10 and OfficeScan/Apex One.
System Requirements
Trend Micro Apex One™ agent recommended system requirements:
| CPU | Memory | Disk Space |
|---|---|---|
| Intel 64 Processor | 2GB | 3GB |
| AMD™ 64 processor |
Resource spikes may occur if a large number of applications, whether native Windows or third-party, are running simultaneously on a computer. If the target machine is already running low on memory and disk space, the Apex One administrator should be critical in upgrading the necessary hardware components prior to Apex One installation.
Trend Micro recommends to have more than sufficient memory and hard disk space to ensure adequate Apex One performance during extensive scanning operations. It is best to commit the recommended memory and disk space allocation exclusive to Apex One especially when the customer intends to enable all additional product features.
For the detailed requirements, please refer to Chapter 3 Apex One Security Agent System Requirements available in this link.
Supported Upgrade Path
Trend Micro Apex One™ supports upgrades from the following versions:
- OfficeScan XG Service Pack 1
- OfficeScan XG
- OfficeScan 11.0 Service Pack 1
Features
Trend Micro Apex One™ additional features include:
- Apex One Application Control
- Apex One Data Loss Prevention (DLP)
- Apex One Endpoint Sensor
- Apex One Vulnerability Protection
For support assistance, please contact Trend Micro Technical Support.
This section provides information on the number of supported agents depending on enabled features.
- The sizing data below is for reference only. It is possible for Apex One to manage more than the upper bound recommendation below if using higher spec machines. Customers can gradually increase number of endpoints while observing the server performance data. Actual sizing limit can vary depending on product configurations and customer environment factors.
- Sizing data below takes into considerations that both Vulnerability Protection and Application Control features are enabled.
- Apex One is expected to provide a comparable experience running on the same hardware as OfficeScan XG if the new advanced features (i.e. Vulnerability Protection, Endpoint Sensor, Application Control) are not enabled.
- Gigabit Network Interface Card (NIC) required
- Apex One Endpoint Sensor does not support MS SQL Express because MS SQL Express does not support Full-Text and Semantic Extractions for the Search feature. For more information, please refer to this link.
- Microsoft SQL Express has a 10 GB maximum database size and other important limits. High load scenarios are not supported by Express. Symptoms can include database connection errors. If you encounter similar issues including reaching the DB size limit repeatedly, Trend Micro recommends upgrading to the supported Standalone Microsoft SQL Server as soon as possible.
| Apex One with pure Anti-Malware function (No Integrated Services) | |||||
|---|---|---|---|---|---|
| Endpoint Count | CPU | RAM | SQL | SQL Server Spec | Smart Protection Server |
| up to 5,000 | 4 cores | 8GB | Express/Standalone | N/A | Integrated/Standalone |
| up to 20,000 | 8 cores | 16GB | 2016 Standalone | 4 cores, 8GB RAM | Standalone |
| up to 50,000 | 12 cores | 32GB | 2016 Standalone | 4 cores, 8GB RAM | Standalone |
| Apex One without enabling Endpoint Sensor feature | |||||
|---|---|---|---|---|---|
| Endpoint Count | CPU | RAM | SQL | SQL Server Spec | Smart Protection Server |
| up to 3,000 | 8 cores | 8GB | Express/Standalone | N/A | Integrated/Standalone |
| up to 10,000 | 8 cores | 32GB | 2016 Standalone | 4 cores, 8GB RAM | Standalone |
| up to 25,000 | 16 cores | 64GB | 2016 Standalone | 4 cores, 8GB RAM | Standalone |
| 25,000 and up | Multiple Apex One Servers are needed to distribute load. Apex Central can be used to manage multiple Apex One servers. Please refer to the Apex Central sizing data below for more details. | ||||
| Apex One with enabled Endpoint Sensor feature | |||||||
|---|---|---|---|---|---|---|---|
| Endpoint Count | CPU | RAM | Maximum Memory Allocation Setting | SQL | SQL Server Spec | Maximum Metadata Storage Setting | Smart Protection Server |
| up to 3,000 | 8 cores | 32GB | Recommended value: 20GB | 2016 SP1 or higher (Standalone) | 4 cores, 16GB RAM | Recommended value: 120GB per month | Standalone |
| up to 10,000 | 16 cores | 96GB | Recommended value: 48GB | 2016 SP1 or higher (Standalone) | 4 cores, 32GB RAM | Recommended value: 450GB per month | Standalone |
| 10,000 and up | Multiple Apex One Servers are needed to distribute load. Apex Central can be used to manage multiple Apex One servers. Please refer to the Apex Central sizing data below for more details. | ||||||
| |||||||
| Apex Central | ||||
|---|---|---|---|---|
| Overall Endpoint Count | CPU | RAM | SQL | SQL Server Spec |
| up to 5,000 | 8 cores | 12GB | Express/Standalone | N/A |
| up to 20,000 | 8 cores | 8GB | Standalone | 8 cores, 12GB RAM |
| up to 50,000 | 8 cores | 8GB | Standalone | 12 cores, 16GB RAM |
| up to 200,000 | 12 cores | 24GB | Standalone | 24 cores, 80GB RAM (Enterprise SSD) |
| Standalone Smart Protection Server Sizing (HTTPS*) | |||||
|---|---|---|---|---|---|
| Endpoint Count | vCPU | RAM | Disk | Hypervisor | |
| up to 10,000 | 4 cores | 8GB | 55GB | ESXi 6.5 Xen 7.1 Hyper-V 2016 | |
| 10,000 and up |
| ||||
This section provides an overview of the migration flow, depending on which features the user intends to enable.
- Apex One no longer supports codebase database. Although in-place upgrade is supported, it is recommended to set up a separate Apex One server and move existing agents to Apex One.
- For a detailed step by step install/upgrade guide and post installation tasks, please refer to the Install and Upgrade Guide:
- Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
- No intention to enable extended features like Application Control, Endpoint Sensor, and Vulnerability Protection; or
- Prefer to continue using standalone version of Trend Micro Application Control, Endpoint Sensor, and Vulnerability Protection
Recommended Upgrade Plan Overview
- Upgrade OfficeScan server to Apex One
- Upgrade Control Manager to Apex Central server [Recommended]
- Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
- Planning to enable extended features Application Control and Vulnerability Protection; and
- Currently using standalone version of Application Control and Vulnerability Protection
Recommended Upgrade Plan Overview
- Upgrade OfficeScan server to Apex One
Upgrading an OfficeScan server to Apex One will not affect the existing installation of the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection. However, Apex One agents will automatically uninstall the standalone version of Application Control, Endpoint Sensor, and Vulnerability Protection when these functions are enabled.
- Upgrade Control Manager to Apex Central server [Required]
- Enable Application Control and Vulnerability Protection features via Apex Central Policy
- Using upgrade supported versions OfficeScan 11.0 Service Pack 1, XG, and XG Service Pack 1;
- Planning to enable extended features Endpoint Sensor, Application Control, and Vulnerability Protection; and
- Currently using standalone version of Endpoint Sensor, Application Control, and Vulnerability Protection
Recommended Upgrade Plan Overview
- Prepare SQL Server 2016 SP1 (Standard/Enterprise only) or higher with Full-Text and Semantic Extractions for Search features enabled [Required]
- Upgrade OfficeScan server to Apex One
- Upgrade Control Manager to Apex Central server [Required]
- Input Endpoint Sensor License on Apex Central [Required]
- Enable Endpoint Sensor, Application Control, and Vulnerability Protection feature via Apex Central Policy
For more information, refer to the migration guide for Apex One On-Premise.