Views:

Prerequisites

Item
Requirements
System requirements
Same as Trend Micro Apex One server and Security Agent
License
  • Included in the Apex One Full Feature for Windows and Mac license
  • An existing Trend Micro Endpoint Application Control license (activated in Trend Micro Apex Central)
Apex Central registration
Required for licensing and Security Agent policy deployment
Compatibility with Trend Micro Endpoint Application Control
  • Server: The Trend Micro Apex One server with Application Control can exist on the same server with Trend Micro Endpoint Application Control (not recommended).
    Important
    Important
    Trend Micro Endpoint Application Control server settings are not compatible with the Apex One Application Control feature. You must manually configure all policies using the Trend Micro Apex Central web console.
  • Agent: Once you deploy an Application Control policy to the Apex One Security Agent, the Security Agent automatically uninstalls any existing Trend Micro Endpoint Application Control agent before applying the Apex One Application Control settings.

Fresh Installation Information

Type
Description
Server
The Apex One Setup program installs the Application Control feature automatically during normal Trend Micro Apex One server installation.
After verifying that the Activation Code includes Application Control, Trend Micro Apex One starts the Trend Micro Application Control Service on the Trend Micro Apex One server computer.
Agent
The Security Agent program includes but does not immediately install the Application Control Service during normal Security Agent installation. To install the Apex One Application Control feature on the Security Agent, you must enable and deploy an Application Control policy from the Trend Micro Apex Central web console.
Once the Security Agent receives the Application Control settings, the Security Agent installs the Application Control feature.

Upgrade Notes

Type
Description
OfficeScan server
The Trend Micro Apex One license only includes the Application Control activation for fresh installations. If you upgrade from a previous version of the OfficeScan server, you must contact your sales representative to obtain a new license that activates the Application Control feature.
The Apex One Setup program installs the Apex One Application Control feature automatically during normal Trend Micro Apex One server installation.
Trend Micro Endpoint Application Control server
Trend Micro Apex One does not support any upgrade or settings migration from the standalone Trend Micro Endpoint Application Control server to the Apex One Application Control feature.
Important
Important
Trend Micro Endpoint Application Control server settings are not compatible with the Apex One Application Control feature. You must manually configure all policies using the Trend Micro Apex Central web console.
Trend Micro Endpoint Application Control agent
Trend Micro Apex One does not support upgrading the Trend Micro Endpoint Application Control agent program to the Apex One Security Agent.
If you install the Apex One Security Agent on an endpoint with the Trend Micro Endpoint Application Control agent installed and deploy an Application Control policy from the Trend Micro Apex Central console, the Security Agent automatically uninstalls the Trend Micro Endpoint Application Control agent and installs the Apex One Application Control feature.

Installation Verification

Type
Description
Trend Micro Apex One server
After installing the Trend Micro Apex One server with a valid license for the feature, you can verify the following:
  • The Trend Micro Application Control Service is running on the Trend Micro Apex One server computer.
  • The Application Control Service folder exists on the Trend Micro Apex One server computer in the following location:
    <Server installation folder>/iServiceSvr/iAC
  • The Application Control Service installation log exists on the Trend Micro Apex One server computer in the following location:
    %windir%/OFCMAS.LOG
Security Agent endpoint
After installing the Security Agent and deploying an Application Control policy from Trend Micro Apex Central, you can verify the following:
  • The Trend Micro Application Control Service (Agent) is running on the Security Agent endpoint.
  • The Application Control Service folder exists on the endpoint in the following location:
    <Security Agent installation folder>/iService/iAC

Post Installation Configuration

Settings
Description
Server
On the Trend Micro Apex Central web console, go to Administration → Updates → Manual Update and ensure that you download the Certified Safe Software Pattern.
Security Agent endpoint
On the Trend Micro Apex Central web console, go to Policies → Policy Management and add or modify the Application Control Settings for the Apex One Security Agent policies as required.