<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>

  Trend Micro, Inc.                                       April 27, 2017

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
              Trend Micro Safe Lock(TM) Intelligent Manager 2.0 
                          Service Pack 1 Patch 1

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   NOTE: This readme file was current as of the date above. However,
   all customers are advised to check the Trend Micro website for
   documentation updates at:

     http://docs.trendmicro.com/

   Trend Micro always seeks to improve its documentation. If you have
   questions, comments, or suggestions about this or any Trend Micro
   documents, please contact us at docs@trendmicro.com. Your feedback
   is always welcome.

   Please evaluate this documentation on the following site:
   http://www.trendmicro.com/download/documentation/rating.asp


   Contents
   ===================================================================

   1. About Safe Lock

   2. What's New
      2.1 Safe Lock Intelligent Manager
      2.2 Safe Lock agents

   3. Documentation Set

   4. System Requirements
      4.1 Safe Lock Intelligent Manager
          4.1.1 Hardware Requirements
          4.1.2 Supported Operating Systems
          4.1.3 IIS Requirements
          4.1.4 SQL Server Requirements
          4.1.5 Browser Requirements (for web console)
      4.2 Safe Lock agents
          4.2.1 Hardware Requirements
          4.2.2 Supported Operating Systems

   5. Installation

   6. Known Issues
      6.1 Safe Lock Intelligent Manager
      6.2 Safe Lock agents

   7. Contact Information

   8. About Trend Micro

   9. License Agreement

   ===================================================================


1. About Trend Micro Safe Lock
========================================================================
   Trend Micro Safe Lock consists of an agent program called Safe Lock
   that resides on endpoints and a server program called Safe Lock
   Intelligent Manager that manages agents.

   Trend Micro Safe Lock Intelligent Manager provides centralized
   monitoring and management of Trend Micro Safe Lock agent deployment,
   status, and events. For example, administrators can remotely deploy
   agents, create initial agent Approved Lists, and change agent
   Application Lockdown states. Additionally, Safe Lock Intelligent
   Manager performs malware scans and administrators can view root
   cause information on files blocked from running by Safe Lock agents,
   reducing the time and effort needed to verify events and allowing
   quick responses to incidents.

   Trend Micro Safe Lock agents protects fixed-function computers like
   Industrial Control Systems (ICS), Point of Sale (POS) terminals,
   and kiosk terminals from malicious software and unauthorized use.
   By using fewer resources and without the need for regular software
   or system updates, Safe Lock agents can reliably secure computers in
   industrial and commercial environments with little performance
   impact or downtime.


2. What's New
========================================================================

   2.1 Safe Lock Intelligent Manager
   =====================================================================
       NOTE: The agent program that resides on endpoints is referred
       to as Safe Lock agent, and the server program that manages 
       agents is referred to as Safe Lock Intelligent Manager.

       Trend Micro Safe Lock Intelligent Manager 2.0 Service Pack 1 
       Patch 1 includes the following features and benefits:

       - Support Windows 10 Enterprise (32-bit/64-bit), Windows 10 IoT 
         Enterprise (32/64bit), and Windows 10 Anniversary Update.

       - Administrators can remotely export and import agent 
         configuration files or Approved Lists remotely from Intelligent
         Manager.

       - Administrators can remotely remove target items from multiple
         agent Approved Lists using the Remote Task Tool.

       - Intelligent Manager supports log forwarding to an external
         syslog server that supports the Common Event Format.

       - Support Storage Device Blocking for the storage devices 
         including floppy disk/removable device/network drive/CD/DVD,
         which could be enabled or disable remotely from Safe Lock 
         Intelligent Manager.

       - Intelligent Manager supports remote access control of storage
         devices on managed endpoints. The storage devices include
         USB drives, CD/DVD drives, floppy disks, and network drives.

       - Intelligent Manager logs events of Storage Device Blocking
         configuration and adding of Trusted Files.


   2.2 Safe Lock agents
   =====================================================================
   Trend Micro Safe Lock agent 2.0 SP 1 Patch 1 includes the following 
   new features and benefits:

   - Support Windows 10 Enterprise (32-bit/64-bit), Windows 10 IoT 
     Enterprise (32/64bit), and Windows 10 Anniversary Update.

   - Application lockdown is enhanced with pop-up notifications on
     managed endpoints to inform the latest application blocking. 

   - Safe Lock can be configured to allow or block storage device access
     on managed endpoints. The storage devices include USB drives, 
     CD/DVD drives, floppy disks, and network drives.

   - The agent Setup.ini can be encrypted to prevent unauthorized access.


3. Documentation Set
========================================================================

   In addition to this readme.txt, the documentation set for this
   product includes the following:

   - Installation Guide (IG): Provides product overview, deployment
     plan, installation steps, and basic information intended to
     help you deploy Trend Micro Safe Lock Intelligent Manager.

   - Administrator's Guide (AG): Provides post-installation 
     instructions on how to configure the settings to help you get
     Trend Micro Safe Lock Intelligent Manager "up and running".
     Also includes instructions on performing other administrative
     tasks for the maintenance of Trend Micro Safe Lock Intelligent
     Manager and for the deployment and maintenance of Trend Micro
     Safe Lock agents.

   - Knowledge Base: Provides a searchable database of known product
     issues, including specific problem-solving and troubleshooting
     topics.

     http://esupport.trendmicro.com


4. System Requirements
========================================================================

   4.1 Safe Lock Intelligent Manager
   =====================================================================

       4.1.1 Hardware Requirements
       =================================================================
             NOTE: Trend Micro Safe Lock Intelligent Manager has
             specific requirements that vary based on other software
             running on the server endpoint.

             - Safe Lock Intelligent Manager:
               - Minimum
                 - RAM: 2GB
                 - Processor: 1 CPU core
                 - Available Disk Space: 10GB
               - Recommended
                 - RAM: 4GB or more
                 - Processor: 1 CPU core or more
                 - Available Disk Space: 20GB

             - Safe Lock Intelligent Manager
               (with Safe Lock agent)
               - Minimum
                 - RAM: 2GB
                 - Processor: 1 CPU core
                 - Available Disk Space: 10GB
               - Recommended
                 - RAM: 4GB or more
                 - Processor: 2 CPU cores or more
                 - Available Disk Space: 20GB

             - Safe Lock Intelligent Manager + Microsoft SQL Server 
               2008 R2 Express SP2 (with or without Safe Lock agent)
               - Minimum
                 - RAM: 4GB
                 - Processor: 1 CPU core
                 - Available Disk Space: 30GB
               - Recommended
                 - RAM: 8GB or more
                 - Processor: 2 CPU cores or more
                 - Available Disk Space: 50GB

             - Safe Lock Intelligent Manager + Microsoft 
               SQL Server 2008/2012/2014 (with or without Safe Lock 
               agent)
               - Minimum
                 - RAM: 32GB
                 - Processor: 2 CPU cores
                 - Available Disk Space: 1TB
               - Recommended
                 - RAM: 32GB or more
                 - Processor: 4 CPU cores or more
                 - Available Disk Space: 2TB or more

             - Monitor and resolution: XGA (1024x768), 16 bit colors


         4.1.2 Supported Operating Systems
         ===============================================================
               Trend Micro Safe Lock Intelligent Manager can be
               installed on the following Microsoft Windows platforms:

               - Windows Clients:
                 - Windows XP (SP2/SP3) [Professional] (32bit)
                 - Windows 7 (NoSP/SP1) [Enterprise/Ultimate] (32/64bit)
                 - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
                 - Windows 8.1 (NoSP) [Pro/Enterprise] (32/64bit)
                 - Windows 10 [Enterprise/IoT Enterprise] (32/64bit)
                   Anniversary Update

               - Windows Server:
                 - Windows Server 2003 (NoSP/SP1/SP2) [Standard/
                   Enterprise/Storage] (32/64bit)
                 - Windows Server 2003 R2 (NoSP/SP1/SP2) [Standard/
                   Enterprise/Storage] (32/64bit)
                 - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/
                   Storage] (32/64bit)
                 - Windows Server 2008 R2 [Standard/Enterprise/Storage]
                   (NoSP/SP1) (64bit)
                 - Windows Server 2012 (NoSP) [Foundation/Essentials/
                   Standard/Datacenter] (64bit)
                 - Windows Server 2012 R2 (NoSP) [Foundation/Essentials/
                   Standard/Datacenter] (64bit)
                 - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)


         4.1.3 IIS Requirements
         ===============================================================
               NOTE: Safe Lock Intelligent Manager has specific
               requirements for IIS that vary based on other software
               running on the server endpoint.

               - Windows Clients:
                 - Windows XP (32bit): IIS 5.1
                 - Windows 7: IIS 7.5
                 - Windows 8: IIS 8.0
                 - Windows 8.1: IIS 8.5
                 - Windows 10: IIS 10.0

               - Windows Server:
                 - Windows Server 2003: IIS 6.0
                 - Windows Server 2003 R2: IIS 6.0
                 - Windows Server 2008: IIS 7.0
                 - Windows Server 2008 R2: IIS 7.5
                 - Windows Server 2012: IIS 8.0
                 - Windows Server 2012 R2: IIS 8.0


         4.1.4 SQL Server Requirements
         ===============================================================
               Safe Lock Intelligent Manager requires one of the
               following versions of SQL Server:

               - Microsoft SQL Server 2008 R2 Express SP2
                 An installer is included in the Safe Lock Intelligent 
                 Manager Setup package.
                 NOTE: Microsoft SQL Server 2008 R2 Express SP2 requires
                 Microsoft .NET Framework 3.5 Service Pack 1.

               - Microsoft SQL Server 2008/2012/2014 (recommended)
                 NOTE: Safe Lock Intelligent Manager without Microsoft 
                 SQL Server 2008 R2 Express SP2 requires 
                 Microsoft .NET Framework 2.0 Service Pack 2.


         4.1.5 Browser Requirements (for web console)
         ===============================================================
               Safe Lock Intelligent Manager web console access
               requires one of the following web browsers:

               - Microsoft Internet Explorer 7.0, 8.0, 9.0, 10.0, 11.0
                 (32/64bit)

               - The latest version of Google Chrome / Chrome Portable

               - Mozilla Firefox 6 or later


   4.2 Safe Lock agents
   =====================================================================

         4.2.1 Hardware Requirements
         ===============================================================
               Trend Micro Safe Lock agents does not have specific 
               hardware requirements beyond those specified by the 
               operating system, with the following exceptions:

               - Available free disk space: 300MB

               - Monitor and resolution: VGA (640x480), 16 colors


         4.2.2 Supported Operating Systems
         ===============================================================
               Safe Lock agents can be installed on the following
               Microsoft Windows platforms:

               Windows:
               - Windows 2000 (SP4) [Professional] (32bit)
               - Windows XP (SP1/SP2/SP3) [Professional] (32bit)
               - Windows Vista (NoSP/SP1/SP2) [Business/Enterprise/
                 Ultimate] (32bit)
               - Windows 7 (NoSP/SP1) [Professional/Enterprise/
                 Ultimate] (32/64bit)
               - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
               - Windows 8.1 (NoSP) [Pro/Enterprise/ with Bing] (32/64bit)
               - Windows 10 [Enterprise/IoT Enterprise] (32/64bit)
                 Anniversary Update
               - Windows XP Embedded (SP1/SP2) (32bit)
               - Windows Embedded Standard 2009 (NoSP) (32bit)
               - Windows Embedded Standard 7 (NoSP/SP1) (32/64bit)
               - Windows Embedded 8 Standard (NoSP) (32/64bit)
               - Windows Embedded 8.1 Pro [Pro/Industry Pro](NoSP) (32/64bit)
               - Windows XP Professional for Embedded Systems (SP1/SP2/
                 SP3) (32bit)
               - Windows Vista for Embedded Systems (NoSP/SP1/SP2)
                 (32bit)
               - Windows 7 for Embedded Systems (NoSP/SP1) (32/64bit)
               - Windows Embedded POSReady (32bit)
               - Windows Embedded POSReady 2009 (32bit)
               - Windows Embedded POSReady 7 (32/64bit)

               Windows Server:
               - Windows 2000 Server SP4 (32bit)
               - Windows Server 2003 (SP1/SP2) [Standard/Enterprise/
                 Storage] (32bit)
               - Windows Server 2003 R2 (NoSP/SP1/SP2) [Standard/
                 Enterprise/Storage] (32bit)
               - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/
                 Storage] (32/64bit)
               - Windows Server 2008 R2 (NoSP/SP1) [Standard/Enterprise/
                 Storage] (64bit)
               - Windows Server 2012 (NoSP) [Essentials/Standard] 
                 (64bit)
               - Windows Server 2012 R2 (NoSP) [Essentials/Standard] 
                 (64bit)
               - Windows Server 2003 for Embedded Systems (SP1/SP2) 
                 (32bit)
               - Windows Server 2003 R2 for Embedded Systems (NoSP/SP2)
                 (32bit)
               - Windows Server 2008 for Embedded Systems (SP1/SP2) (32/
                 64bit)
               - Windows Server 2008 R2 for Embedded Systems (NoSP/SP1)
                 (64bit)
               - Windows Server 2012 for Embedded Systems (NoSP) (64bit)
               - Windows Server 2012 R2 for Embedded Systems (NoSP)
                 (64bit)


5. Installation
========================================================================
   For information, see the Installation Guide.


6. Known Issues
========================================================================

      6.1 Safe Lock Intelligent Manager
   =====================================================================

       - Installed Safe Lock 1.x agents block and prevent the
         installation of Trend Micro Safe Lock Intelligent Manager.
         Trend Micro Safe Lock Intelligent Manager must be installed
         before Trend Micro Safe Lock agent when installing both on the
         same endpoint. Safe Lock agent can be installed after 
         installation of Safe Lock Intelligent Manager is complete.

       - During Safe Lock Intelligent Manager re-installations using
         an existing Microsoft SQL Server, any mismatch between the
         original Safe Lock Intelligent Manager server IP address and
         the new Safe Lock Intelligent Manager server IP address
         results in the original Safe Lock Intelligent Manager database
         being erased and a new database being used.

       - Safe Lock agents Trusted Updater or Predefined Trusted Updater
         do not support the installation of Trend Micro Safe Lock 
         Intelligent Manager. Remove Safe Lock agent from the endpoint 
         before installing Safe Lock Intelligent Manager. Safe Lock 
         agents can be installed after installation of Safe Lock 
         Intelligent Manager is complete.

       - Safe Lock Intelligent Manager remote installations to
         endpoints running Windows 2000 Server may not automatically
         reboot even if the reboot is needed.

       - Safe Lock Intelligent Manager remote installations may not
         succeed because the svchost.exe process can end unexpectedly
         in the following versions of Windows:
         - Windows 2000 (SP4)
         - Windows Server 2003 (SP1/SP2)
         - Windows XP (SP1/SP2/SP3)

       - When a script is blocked, two messages are recorded in the
         Windows Event Log. For example, *.bat will be blocked twice
         by Safe Lock agents and will therefore create two block 
         events.

       - Root cause analysis is unable to indicate information for
         blocked files located on mapped network drives.

       - Safe Lock agents are unable to upload their debug log to
         Trend Micro Safe Lock Intelligent Manager if that debug log
         is over 2GB.

       - Network antivirus software may prevent files containing known
         malicious content from being sent from Safe Lock agents to
         Safe Lock Intelligent Manager for scanning.

       - In some cases, if a Safe Lock agent is unable to send a
         blocked file to Safe Lock Intelligent Manager for scanning,
         Safe Lock Intelligent Manager reports the status of the file
         as "Pending Scan". However, in these cases, the file is never
         sent and the status is permanently reported as "Pending Scan".

       - Safe Lock Intelligent Manager is unable to sync license status
         to agents after the Safe Lock Intelligent Manager license
         expires. Specify a valid Activation Code in Trend Micro Safe
         Lock Intelligent Manager to keep licenses consistent if your
         Activation Code expires.

       - IIS server 7.0 or below is associated with a delay (typically
         10 seconds) during the first Trend Micro Safe Lock
         Intelligent Manager web console log on.

       - When Safe Lock Intelligent Manager uses a local server
         requiring authentication (UNC) for updates, Windows XP, 7, 8,
         and 8.1 are sometimes unable maintain enough simultaneous
         network connections to update all specified components.

       - Google Chrome blocks downloaded packages of Trend Micro Safe
         Lock agent from the web console.

       - Safe Lock Intelligent Manager is unable to remotely
         uninstall Safe Lock agents on Windows 7 or later version from 
         Windows Server 2008. Windows Server 2008 R2 does not have an 
         issue.

       - After installing the Safe Lock agent and Safe Lock Intelligent
         Manager together on an endpoint running Windows Server 2008 
         without SP2, then specifying IIS 7.0 as the web server, the 
         Safe Lock Intelligent Manager web console and applications 
         using IIS 7.0 may not work as expected.

       - Long group names on the Agent Management directory may be 
         corrupted when the web console is accessed through Internet 
         Explorer.  This issue can be avoided by using Chrome or 
         Firefox.

       - The installer may not launch if there is not enough disk space 
         on the target endpoint. Ensure that the target endpoint meets 
         the specified requirement for free space.

       - The close button on the Dashboard page may not function if the 
         console is accessed through Chrome or Firefox and that another 
         dialog box from the browser has just been closed.

       - Component version may be displayed incorrectly on the web 
         console if the Intelligent Manager server is updated during a 
         component update. 

       - Long file names on the File Hash Generator interface may not be
         fully displayed these files names are hovered over with a 
         cursor.

       - The banner on the File Hash Generator interface may disappear 
         when the DPI is set to 125% or above.

       - Command Deployment Status shows random characters after
         clicking a Download link in Internet Explorer 7 or 8 when an
         Internet Explorer's security setting (Downloads > Automatic
         prompting for file downloadsis disabled).

       - The Sltasks.exe command, "--removeitems", only supports CSV
         files in the UTF-8 format.

       - Intelligent Manager is unable to export or save files with long
         file names. A long name file is truncated when the file is 
         exported or saved.

       - Intelligent Manager may not be able to restart on Windows 10 
         after a system reboot if the hardware specifications are low.
         To resolve the issue, consider changing the ServicesPipeTimeout
         value to 1 minute or more.

         Find the value in the following path and key:
         HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
         "ServicesPipeTimeout" (milliseconds)


   6.2 Safe Lock agents
   =====================================================================
       For information, see Readme file for Safe Lock agents.


7. Contact Information
========================================================================
   A license to the Trend Micro software usually includes the right to
   product updates, pattern file updates, and basic technical support
   for one (1) year from the date of purchase only. After the first
   year, Maintenance must be renewed on an annual basis at
   Trend Micro's then-current Maintenance fees.

   You can contact Trend Micro via fax, phone, and email, or visit
   us at:

   http://www.trendmicro.com

   Evaluation copies of Trend Micro products can be downloaded from
   our web site.

   Global Mailing Address/Telephone Numbers
   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   For global contact information in the Asia/Pacific region, Australia
   and New Zealand, Europe, Latin America, and Canada, refer to:

   http://www.trendmicro.com/en/about/overview.htm

   The Trend Micro "About Us" screen displays. Click the appropriate
   link in the "Contact Us" section of the screen.

   Note: This information is subject to change without notice.


8. About Trend Micro
========================================================================
   Trend Micro Incorporated, a global leader in Internet content
   security and threat management, aims to create a world safe for the
   exchange of digital information for businesses and consumers. A 
   pioneer in server-based antivirus with over 20 years of experience,
   we deliver top-ranked security that fits our customers' needs, stops
   new threats faster, and protects data in physical, virtualized and
   cloud environments. Powered by the Trend Micro(TM) Smart Protection
   Network(TM) infrastructure, our industry-leading cloud-computing 
   security technology and products stop threats where they emerge, on
   the Internet, and are supported by 1,000+ threat intelligence 
   experts around the globe. For additional information, visit 
   www.trendmicro.com.

   Copyright 2017, Trend Micro Incorporated. All rights reserved.
   Trend Micro, the t-ball logo and OfficeScan are trademarks of Trend
   Micro Incorporated and are registered in some jurisdictions. All 
   other product or company names may be trademarks or registered 
   trademarks of their owners.


9. License Agreement
========================================================================
   Information about your license agreement with Trend Micro can be 
   viewed at:

   http://us.trendmicro.com/us/about/company/user_license_agreements/

   Third-party licensing agreements can be viewed by selecting the
   "About" option in the application user interface.