Upgrading

If you upgrade from a 1.x version of Endpoint Application Control to 2.0 or later, the newer version attempts to help you import your old data.

Tip:

If you encounter problems importing your old data, contact Trend Micro Technical Support.

See Contacting Trend Micro.

To reduce the risk of data loss, Trend Micro recommends using the following upgrade flow:

  1. Back up your server and agent data.

    See Backing up your Server.

    After starting your back up, Trend Micro recommends not using your Endpoint Application Control server again until you complete your upgrade.

  2. Optionally, migrate your old data to a new server endpoint. Do the following:

    1. Install the older version of Endpoint Application Control server on the new server endpoint.

    2. Restore your old data to the new server endpoint.

      See Restoring your Server and Agents.

  3. Upgrade the Endpoint Application Control server using the Windows installation wizard.

    See Server Installation.

    During server installation, the Windows installation wizard attempts to import policies, rules, and settings from the older version.

  4. Log on the web console to automatically import policy action logs from the older server version.

    Note:

    Importing policy action logs can take a substantial amount of time.

  5. To upgrade agents that were originally deployed using OfficeScan Plug-in Manager, follow the steps below.

    1. On the Endpoint Application Control console, go to Updates.

    2. Select Internet or network server and specify the UNC path of the Plug-in Manager.

    3. Stop OfficeScan Plug-in Manager service via Microsoft Management Console (click Start > Run and type services.msc).

    4. Prepare ActiveUpdate Server with correct files, with complete files and correct server.ini and OSCE_AOS_COMP_LIST.zip.

    5. In the following path, remove the registry folder key by deleting OSCE_ADDON_AC folder and modify OSCE_ADDon_Service_CompList_Version to 2.3.1001.

      Path: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/TrendMicro/OfficeScan/service/Aos/

    6. In the following path, delete previously downloaded "server.ini" file and "enu" folder.

      Path: C:\Program Files (x86)\Trend Micro\OfficeScan\PCCSRV\Download\

    7. Start Plug-in Manager via Microsoft Management Console (click Start > Run and type services.msc).

  6. To upgrade agents that were originally installed using any method other than the OfficeScan plug-in, follow the steps below.

    1. To upgrade agents of version 1.x to 2.0 or later, first uninstall them and then deploy new agents. Specify any new server information during agent installation.

      See Agent Uninstallation.

      See About Agent Uninstallation and Agent Deployment.

    2. To upgrade agents of version 2.0 or a later version to a newer version, use one of the following commands depending on your installer type.

      For an MSI installer package, type the command in this format:

      msiexec /i <installer name> reinstall="all" reinstallmode=vomus ServerHost=<http://serverIP_or_hostname:port or https://hostname:ssl_port> /norestart /qn /l*v C:\temp\<installer name>.log

      For example, type in msiexec /i AcAgentSetup_x64.msi reinstall="all" reinstallmode=vomus ServerHost=https://tmeac.example.com:4343 /norestart /qn /l*v C:\temp\AcAgentSetup_x64.msi.log.

      For an EXE installer package, type in the command in this format:

      <installer name> ServerHost=<http://serverIP or hostname:port or https://serverIP or hostname:ssl port>

      For example, type in AcAgentSetup_x86.exe ServerHost=https://tmeac.example.com:4343.

    The agents begin exchanging endpoint inventories, applied policies, and similar data with the newly upgraded server.

  7. Monitor agents on the Users and Endpoints screen.

    See Users and Endpoints Screen.