Endpoint Encryption allows the update of PolicyServer settings in Encryption Management
for
Microsoft Bitlocker and Encryption Management for Apple FileVault, even after installation.
Procedure
- To update policy settings for agents where Encryption Management for Microsoft Bitlocker
is
intalled, perform the following:
- On the agent, open a command line window as an administrator.
- Navigate to the following path:
%Program Files%\Trend Micro\FDE Encryption Management
Verify that theTMFDEForBitlocker.exe
file exists on the location. - Type the following commands:
TMFDEForBitlocker.exe -ChangeServer username=<UserID> password=<Password> newserver=<Newserverhostname>
TMFDEForBitlocker.exe -ChangeServer eusername=<EncryptedUserID> epassword=<EncryptedPassword> newserver=<Newserverhostname>
TMFDEForBitlocker.exe -ChangeEnterprise username=<UserID> password=<Password> newserver=<Newserverhostname> newenterprise=<Newenterprisename> newadmin=<Groupadminonnewserver> newpassword=<Passwordforgroupadmin>
TMFDEForBitlocker.exe -ChangeEnterprise eusername=<EncryptedUserID> epassword=<EncryptedPassword> newserver=<Newserverhostname> newenterprise=<Newenterprisename> newadmin=<eGroupadminonnewserver> enewpassword=<ePasswordforgroupadmin>
Note
To use encrypted values for user names and passwords generated byCommandLineHelper.exe
, replace the argument names with theeusername=
andenewpassword=
parameters.
- To update policy settings for agents where Encryption Management for Apple FileVault
is
intalled, perform the following:
- On the agent, open a command line window as an administrator.
- Navigate to the following path:
/Library/Application/Support/TrendMicro/FDEMM/
- Type the following commands:
$sudo SupportTool –ChangeEnterprise username=<UserID> password=<password> newserver=<newserverhostname> newenterprise=<newenterprisename> newadmin=<groupadminonnewserver> newpassword=<passwordforgroupadmin> [skipKeyCheck=<true|false>]
$sudo SupportTool -ChangeServer eusername=<EncryptedUserID> epassword=<EncryptedPassword> newserver=<newserverhostname>
$sudo SupportTool -ChangeEnterprise eusername=<EncryptedUserID> epassword=<EncryptedPassword> newserver=<newserverhostname> newenterprise=<newenterprisename> enewadmin=<groupadminonnewserver> enewpassword=<passwordforgroupadmin>
Note
To use encrypted values for user names and passwords generated byCommandLineHelper.exe
, replace the argument names with theeusername=
andenewpassword=
parameters.
- Verify that the changes were applied to the agent.