<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>

Trend Micro, Inc.                                   April 30, 2020

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  Trend Micro Safe Lock(TM) Intelligent Manager TXOne Edition 1.1

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  NOTE: This readme file was current as of the date above.
  However, all customers are advised to check the Trend Micro website
  for documentation updates at:

    http://docs.trendmicro.com/

  Trend Micro always seeks to improve its documentation. If you have
  questions, comments, or suggestions about this or any Trend Micro
  documents, please contact us at docs@trendmicro.com.
  Your feedback is always welcome.

  Please evaluate this documentation on the following site:

    http://docs.trendmicro.com/en-us/survey.aspx


  Contents
========================================================================

  1. About Safe Lock

  2. What's New

    2.1 Safe Lock Intelligent Manager
    2.2 Safe Lock Agents

  3. Documentation Set

  4. System Requirements

    4.1 Safe Lock Intelligent Manager
        4.1.1 Hardware Requirements
        4.1.2 Supported Operating Systems
        4.1.3 IIS Requirements
        4.1.4 SQL Server Requirements
        4.1.5 Browser Requirements (for web console)
    4.2 Safe Lock agents
        4.2.1 Hardware Requirements
        4.2.2 Supported Operating Systems

  5. Installation

  6. Known Issues

    6.1 Safe Lock Intelligent Manager
    6.2 Safe Lock agents

  7. Contact Information

  8. About Trend Micro

  9. About TXOne Networks

  10. License Agreement


========================================================================

1. About Trend Micro Safe Lock
========================================================================
  Trend Micro Safe Lock consists of an agent program called Safe Lock
  that resides on endpoints and a server program called Safe Lock
  Intelligent Manager that manages agents.

  Trend Micro Safe Lock Intelligent Manager provides centralized
  monitoring and management of Trend Micro Safe Lock agent deployment,
  status, and events. For example, administrators can remotely deploy
  agents, create initial agent Approved Lists, and change agent
  Application Lockdown states. Additionally, Safe Lock Intelligent
  Manager performs malware scans and administrators can view root cause
  information on files blocked from running by Safe Lock agents,
  reducing the time and effort needed to verify events and allowing
  quick responses to incidents.

  Trend Micro Safe Lock agents protects fixed-function computers like
  Industrial Control Systems (ICS), Point of Sale (POS) terminals, and
  kiosk terminals from malicious software and unauthorized use.
  By using fewer resources and without the need for regular software or
  system updates, Safe Lock agents can reliably secure computers in
  industrial and commercial environments with little performance
  impact or downtime.


2. What's New
========================================================================

  2.1 Trend Micro Safe Lock Intelligent Manager
  ======================================================================
  NOTE: The agent program that resides on endpoints is referred to as
  the Safe Lock agent, and the server program that manages agents is
  referred to as Safe Lock Intelligent Manager.

  Trend Micro Safe Lock Intelligent Manager includes the following
  features and benefits:

  - You can start a manual scan or scheduled scan on agent endpoints
    from the Intelligent Manager console. This function requires special
    licensing.

  - Endpoint search filter has been enhanced to include the
    following:
        - Support partial search for endpoint names.
        - Display registered agents with a system time that is later
        than the server system time.

  - The Approved List export feature has been enhanced to include
    the time a file was added or modified in the list.

  - This release of Safe Lock Intelligent Manager includes new event
    logs for Intelligent Manager component updates.

  2.2 Trend Micro Safe Lock Agent
  ======================================================================
  Trend Micro Safe Lock agent includes the following new features and
  benefits:

  -  Safe Lock provides the scan function that you can start manually
     on endpoints to scan for malware.  This function requires special
	 licensing.

  - Safe Lock agent-server communication has been enhanced to support
    Safe Lock agents with a fixed IP address.

  - The enhanced Safe Lock data flow and system function processing
    increase system operation efficiency.

  - Safe Lock agent installation supports Microsoft Windows 10 May
    2019 Update (19H1), November 2019 Update (19H2), and (20H1).


3. Documentation Set
========================================================================
  To download or view electronic versions of the documentation set for 
  this product, go to http://docs.trendmicro.com

  - Installation Guide (IG): The Installation Guide contains information
  on requirements and procedures for installing and deploying
  Trend Micro Safe Lock Intelligent Manager.

  - Administrator's Guide (AG): Provides post-installation
  instructions on how to configure the settings to help you get Trend
  Micro Safe Lock Intelligent Manager "up and running". Also includes
  instructions on performing other administrative tasks for the
  maintenance of Trend Micro Safe Lock Intelligent Manager and for
  the deployment and maintenance of Trend Micro Safe Lock agents.

  - Support Portal: The Support Portal contains information on
  troubleshooting and resolving known issues.

  To access the Support Portal, go to http://esupport.trendmicro.com


4. System Requirements
======================================================================

  4.1 Safe Lock Intelligent Manager
  ==================================================================

  4.1.1 Hardware Requirements
  =================================================================
  NOTE: Trend Micro Safe Lock Intelligent Manager has specific
  requirements that vary based on other software running on the server
  endpoint.

  Safe Lock Intelligent Manager:
    - Minimum
    - RAM: 2GB
    - Processor: 1 CPU core
    - Available Disk Space: 10GB
    - Recommended
    - RAM: 4GB or more
    - Processor: 1 CPU core or more
    - Available Disk Space: 20GB

  Safe Lock Intelligent Manager (with Safe Lock agent):
    - Minimum
    - RAM: 2GB
    - Processor: 1 CPU core
    - Available Disk Space: 10GB
    - Recommended
    - RAM: 4GB or more
    - Processor: 2 CPU cores or more
    - Available Disk Space: 20GB

  Safe Lock Intelligent Manager + Microsoft SQL Server 2008 R2 Express
  SP2 (with or without Safe Lock agent):
    - Minimum
    - RAM: 4GB
    - Processor: 1 CPU core
    - Available Disk Space: 30GB
    - Recommended
    - RAM: 8GB or more
    - Processor: 2 CPU cores or more
    - Available Disk Space: 50GB

  Safe Lock Intelligent Manager + Microsoft SQL Server 2008/2012/2014/
  2016/2017 (with or without Safe Lock agent):
    - Minimum
    - RAM: 32GB
    - Processor: 2 CPU cores
    - Available Disk Space: 1TB
    - Recommended
    - RAM: 32GB or more
    - Processor: 4 CPU cores or more
    - Available Disk Space: 2TB or more

  Monitor and resolution: XGA (1024x768), 16 bit colors

  NOTE: Trend Micro Safe Lock supports only CPUs with Intel 64 and 
        IA-32 Architectures.

  4.1.2 Supported Operating Systems
  ===============================================================
  Trend Micro Safe Lock Intelligent Manager can be installed on the
  following Microsoft Windows platforms:

  Windows Clients:
    - Windows 7 (NoSP/SP1) [Enterprise/Ultimate] (32/64bit)
    - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 8.1 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 10 [Enterprise/IoT Enterprise] (32/64bit)
    Anniversary Update, Creators Update

  Windows Server:
    - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage]
    (32/64bit)
    - Windows Server 2008 R2 [Standard/Enterprise/Storage] (NoSP/SP1)
    (64bit)
    - Windows Server 2012 (NoSP) [Foundation/Essentials/Standard/
    Datacenter] (64bit)
    - Windows Server 2012 R2 (NoSP) [Foundation/Essentials/Standard/
    Datacenter] (64bit)
    - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)
    - Windows Server 2016 (NoSP) [Standard] (64bit)
    - Windows Storage Server 2016 (64bit)
    - Windows Server 2019 [Standard] (64bit)


  4.1.3 IIS Requirements
  ===============================================================
  NOTE: Trend Micro Safe Lock Intelligent Manager has specific
  requirements for IIS that vary based on other software running on
  the server endpoint.

  Windows Clients:
    - Windows 7: IIS 7.5
    - Windows 8: IIS 8.0
    - Windows 8.1: IIS 8.5
    - Windows 10: IIS 10.0

  Windows Server:
    - Windows Server 2008: IIS 7.0
    - Windows Server 2008 R2: IIS 7.5
    - Windows Server 2012: IIS 8.0
    - Windows Server 2012 R2: IIS 8.0
    - Windows Server 2016: IIS 10.0
    - Windows Storage Server 2016: IIS 10.0
    - Windows Server 2019: IIS 10.0

  4.1.4 SQL Server Requirements
  ===============================================================
  Safe Lock Intelligent Manager requires one of the following versions
  of SQL Server:

  - Microsoft SQL Server 2008 R2 Express SP2:
    An installer is included in the Safe Lock Intelligent Manager 
    Setup package.

  NOTE: Microsoft SQL Server 2008 R2 Express SP2 requires Microsoft
  .NET Framework 3.5 Service Pack 1.

  - Microsoft SQL Server 2008/2012/2014/2016/2017 (recommended):

  NOTE: Safe Lock Intelligent Manager without Microsoft SQL Server
  2008 R2 Express SP2 requires Microsoft .NET Framework 2.0 Service
  Pack 2.

  4.1.5 Browser Requirements (for web console)
  ===============================================================
  Safe Lock Intelligent Manager web console access requires one of the
  following web browsers:

    - The latest version of Google Chrome / Chrome Portable
    - Mozilla Firefox 6 or later
    - Microsoft Edge
    - Microsoft Internet Explorer 9.0, 10.0, 11.0 (32/64bit)

  NOTE: Older versions of Internet Explorer are unsupported for
  security reasons.

  4.2 Safe Lock Agent
  ====================================================================

  4.2.1 Hardware Requirements
  ===============================================================
  Safe Lock agents do not have specific hardware requirements beyond
  those specified by the operating system, with the following
  exceptions:

    - Available free disk space: 300MB
    - Monitor and resolution: VGA (640x480), 16 colors

  NOTE: Trend Micro Safe Lock supports only CPUs with Intel 64 and
  IA-32 Architectures.

  4.2.2 Supported Operating Systems
  ===============================================================
  Safe Lock agent can be installed in the following Microsoft Windows
  platforms:

  Windows Clients:
    - Windows 2000 (SP4)[Professional](32bit)
    - Windows XP (SP1/SP2/SP3) [Professional](32bit)
    - Windows Vista (NoSP/SP1/SP2)[Business/Enterprise/Ultimate](32bit)
    - Windows 7 (NoSP/SP1) [Professional/Enterprise/Ultimate](32/64bit)
    - Windows 8 (NoSP) [Pro/Enterprise](32/64bit)
    - Windows 8.1 (NoSP) [Pro/Enterprise/with Bing](32/64bit)
    - Windows 10 [Pro/Enterprise/IoT Enterprise](32/64bit)
      Anniversary Update, Creators Update, Fall Creators Update,
      April 2018 Update, October 2018 Update, May 2019 Update,
      November 2019 Update, 20H1
    - Windows XP Embedded (SP1/SP2)(32bit)
    - Windows Embedded Standard 2009 (NoSP)(32bit)
    - Windows Embedded Standard 7 (NoSP/SP1)(32/64bit)
    - Windows Embedded 8 Standard (NoSP)(32/64bit)
    - Windows Embedded 8.1 Pro [Pro/Industry Pro](NoSP)(32/64bit)
    - Windows XP Professional for Embedded Systems (SP1/SP2/SP3)(32bit)
    - Windows Vista for Embedded Systems (NoSP/SP1/SP2)(32bit)
    - Windows 7 for Embedded Systems (NoSP/SP1)(32/64bit)
    - Windows Embedded POSReady (32bit)
    - Windows Embedded POSReady 2009 (32bit)
    - Windows Embedded POSReady 7 (32/64bit)

  Windows Server:
    - Windows 2000 Server SP4 (32bit)
    - Windows Server 2003 (SP1/SP2)[Standard/Enterprise/Storage](32bit)
    - Windows Server 2003 R2 (NoSP/SP1/SP2)[Standard/Enterprise/
    Storage](32bit)
    - Windows Server 2008 (SP1/SP2)[Standard/Enterprise/Storage]
    (32/64bit)
    - Windows Server 2008 R2 (NoSP/SP1)[Standard/Enterprise/Storage]
    (64bit)
    - Windows Server 2012 (NoSP)[Essentials/Standard](64bit)
    - Windows Server 2012 R2 (NoSP)[Essentials/Standard](64bit)
    - Windows Server 2016 (NoSP)[Standard](64bit)
    - Windows Storage Server 2016 (64bit)
    - Windows Server 2003 for Embedded Systems (SP1/SP2)(32bit)
    - Windows Server 2003 R2 for Embedded Systems (NoSP/SP2)(32bit)
    - Windows Server 2008 for Embedded Systems (SP1/SP2)(32/64bit)
    - Windows Server 2008 R2 for Embedded Systems (NoSP/SP1)(64bit)
    - Windows Server 2012 for Embedded Systems (NoSP)(64bit)
    - Windows Server 2012 R2 for Embedded Systems (NoSP)(64bit)
    - Windows Server 2019 [Standard] (64bit)


5. Installation
========================================================================
  For information, see the Installation Guide.


6. Known Issues
========================================================================

  6.1 Trend Micro Safe Lock Intelligent Manager
  ====================================================================
  Known issues in this release:

  6.1.1 Installation and Uninstallation
  ====================================================================
  a. When installing both programs on the same endpoint, Trend Micro 
    Safe Lock Intelligent Manager must be installed before the Trend 
    Micro Safe Lock agent. The Safe Lock agent can be installed after
    the installation of Safe Lock Intelligent Manager is complete.

  b. During Safe Lock Intelligent Manager re-installations using an 
    existing Microsoft SQL Server, any discrepancy between the original
    Safe Lock Intelligent Manager server IP address and the new Safe
    Lock Intelligent Manager server IP address results in the original
    Safe Lock Intelligent Manager database being erased and a new
    database being used.

  c. The Trusted Updater or Predefined Trusted Updater of Safe Lock 
    agents do not support the installation of Trend Micro Safe Lock 
    Intelligent Manager. Remove the Safe Lock agent from the endpoint
    before installing Safe Lock Intelligent Manager. Safe Lock agents
    can be installed after the installation of Safe Lock Intelligent 
    Manager is complete.

  d. Safe Lock Intelligent Manager remote installations on endpoints 
    running Windows 2000 Server may not automatically reboot even if 
    the reboot is needed.

  e. Safe Lock Intelligent Manager remote installations may not succeed
    because the svchost.exe process can terminate unexpectedly in the
    following versions of Windows:
    - Windows 2000 (SP4)
    - Windows Server 2003 (SP1/SP2)
    - Windows XP (SP1/SP2/SP3)

  f. If the Safe Lock agent and Safe Lock Intelligent Manager are both
    installed on an endpoint running Windows Server 2008 without SP2,
    using IIS 7.0 as the web server may cause the Safe Lock Intelligent
    Manager web console and applications using IIS 7.0 to not work as
    expected.

  g. The installer may not launch if there is not enough disk space
    on the target endpoint. Ensure that the target endpoint meets 
    the specified requirement for free space.

  h. Safe Lock Intelligent Manager is unable to remotely uninstall
    Safe Lock agents on Windows 7 or later from a Windows Server 2008
    endpoint. This issue does not occur on Windows Server 2008 R2.

  6.1.2 Web Console
  ====================================================================
  a. Google Chrome blocks downloaded packages of Trend Micro Safe Lock
    agent from the web console.

  b. Long group names on the Agent Management directory may be corrupted
    when the web console is accessed through Internet Explorer.
    This issue can be avoided by using Chrome or Firefox.

  c. When the console is accessed through Chrome or Firefox, the close
    button on the Dashboard page may not function correctly if another
    dialog box from the browser has just been closed.

  d. Component versions may be displayed incorrectly on the web console
    if the Intelligent Manager server is updated during a component
    update.

  e. The Command Deployment Status shows random characters after 
    clicking a Download link in Internet Explorer 7 or 8 if Internet 
    Explorer's security setting(Downloads > Automatic prompting for 
    file downloads) is disabled.

  f. IIS server 7.0 or below is associated with a del (typically 10
    seconds) during the first Trend Micro Safe Lock Intelligent Manager
    web console log on.

  g. Intelligent Manager may not be able to restart on Windows 10
    after a system reboot if the hardware specifications are low.
    To resolve the issue, update the ServicesPipeTimeout value to 1
    minute or more.

    Find the value in the following path and key:
    - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
    "ServicesPipeTimeout" (milliseconds)

  h. If Administrators try to check the connection for one agent after
    cancelling the connection check for a lot of agents, the "Check
    Connection" window remains at the screen for a long time until all
    the other check connection tasks are finished.

  i. If a user changes his password on a Safe Lock Intelligent Manager
    that is registered to a Trend Micro Control Manager server
    (Apex Central), the password on the Trend Micro Control Manager
    server must also be updated. Otherwise, the user account may be
    locked out after multiple logon retries. 

  j. Help content for Trend Micro Safe Lock widgets are not accessible
    if the Trend Micro Control Manager server (Apex Central) is not
    connected to the internet.

  6.1.3 Agent Communication
  ====================================================================
  a. When a script is blocked, the agent records two messages in the
    Windows Event Log. For example, *.bat will be blocked twice by
    Safe Lock agents and will therefore create two block events.

  b. Network antivirus software may prevent files containing known
    malicious content from being sent from Safe Lock agents to Safe 
    Lock Intelligent Manager for scanning.

  c. In some cases, if a Safe Lock agent is unable to send a blocked 
    file to Safe Lock Intelligent Manager for scanning, Safe Lock
    Intelligent Manager reports the status of the file as 
    "Pending Scan". However, in these cases, the file is never sent and
    the status is permanently reported as "Pending Scan".

  d. Safe Lock Intelligent Manager is unable to synchronize license 
    status to agents after the Safe Lock Intelligent Manager license 
    expires. Specify a valid Activation Code in Trend Micro Safe Lock
    Intelligent Manager if your Activation Code expires.

  6.1.4 SLtasks
  ====================================================================
  a. The SLtasks.exe command "--removeitems" only supports CSV files
    in the UTF-8 format.

  b. Safe Lock Intelligent Manager is unable to export or save files
    with long file names. A long name file is truncated when the file
    is exported or saved.

  c. If the secure port for log collection and status update is
    disconnected during the Safe Lock agent transfer process, the agent
    might not be unregistered from the original Intelligent Manager. 

  6.1.5 File Hash Generator
  ====================================================================
  a. Long file names on the File Hash Generator interface may not be
    fully displayed whenever a cursor hovers over these files names.

  b. The banner on the File Hash Generator interface may disappear if
    the DPI is set to 125% or above.

  6.1.6 Miscellaneous
  ====================================================================
  a. Root cause analysis is unable to indicate information for blocked
    files located on mapped network drives.

  b. When Safe Lock Intelligent Manager uses a local server requiring
    authentication (UNC) for updates, endpoints running Windows XP, 7,
    8, and 8.1 might not be able to maintain simultaneous network
    connections to update all specified components.

  c. Safe Lock agents are unable to upload their debug log to Trend
    Micro Safe Lock Intelligent Manager if the debug log is over 2GB.

  6.2 Trend Micro Safe Lock agents
  ====================================================================
  For information, see the Readme file for Safe Lock agents.


7. Contact Information
========================================================================
  A license to Trend Micro software usually includes the right to
  product updates, pattern file updates, and basic technical support
  for one (1) year from the date of purchase only. After the first
  year, you must renew Maintenance on an annual basis at Trend Micro's
  then-current Maintenance fees.

  Contact Trend Micro via fax, phone, and email, or visit our website
  to download evaluation copies of Trend Micro products.

  http://www.trendmicro.com/us/about-us/contact/index.html

  NOTE: This information is subject to change without notice.


8. About Trend Micro
========================================================================
  Trend Micro Incorporated, a global leader in Internet content security
  and threat management, aims to create a world safe for the exchange of
  digital information for businesses and consumers.
  A pioneer in server-based antivirus with over 20 years of experience,
  we deliver top-ranked security that fits our customers' needs, stops
  new threats faster, and protects data in physical, virtualized and
  cloud environments. Powered by the Trend Micro(TM) Smart Protection
  Network(TM) infrastructure, our industry-leading cloud-computing 
  security technology and products stop threats where they emerge, on
  the Internet, and are supported by 1,000+ threat intelligence experts
  around the globe. For additional information,
  visit www.trendmicro.com.

  Copyright 2020, Trend Micro Incorporated. All rights reserved.

  Trend Micro, the t-ball logo and Safe Lock are trademarks of Trend
  Micro Incorporated and are registered in some jurisdictions. All 
  other product or company names may be trademarks or registered 
  trademarks of their owners.


9. About TXOne Networks
========================================================================
  TXOne Networks Inc. is a joint-venture between Trend Micro Inc. and
  Moxa Inc.

  TXOne Network Inc. offers cybersecurity solutions to protect 
  industrial control systems (ICS) and ensure reliability and safety 
  from cyberattacks.


10. License Agreement
========================================================================
  View information about your license agreement with Trend Micro at: 
  www.trendmicro.com/us/about-us/legal-policies/license-agreements

  Third-party licensing agreements can be viewed:
  - By selecting the "About" option in the application user interface
  - By referring to the "Legal" page of the Administrator's Guide