<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>

  Trend Micro, Inc.                                    July 6, 2018

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
              Trend Micro Safe Lock(TM) Intelligent Manager 2.0 
                          Service Pack 1 Patch 3

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   NOTE: This readme file was current as of the date above. However,
   all customers are advised to check the Trend Micro website for
   documentation updates at:

     http://docs.trendmicro.com/

   Trend Micro always seeks to improve its documentation. If you have
   questions, comments, or suggestions about this or any Trend Micro
   documents, please contact us at docs@trendmicro.com. Your feedback
   is always welcome.

   Please evaluate this documentation on the following site:
   http://www.trendmicro.com/download/documentation/rating.asp


   Contents
   ===================================================================

   1. About Safe Lock

   2. What's New
      2.1 Safe Lock Intelligent Manager
      2.2 Safe Lock Agents

   3. Documentation Set

   4. System Requirements
      4.1 Safe Lock Intelligent Manager
          4.1.1 Hardware Requirements
          4.1.2 Supported Operating Systems
          4.1.3 IIS Requirements
          4.1.4 SQL Server Requirements
          4.1.5 Browser Requirements (for web console)
      4.2 Safe Lock agents
          4.2.1 Hardware Requirements
          4.2.2 Supported Operating Systems

   5. Installation

   6. Known Issues
      6.1 Safe Lock Intelligent Manager
      6.2 Safe Lock agents

   7. Contact Information

   8. About Trend Micro

   9. License Agreement

   ===================================================================


1. About Trend Micro Safe Lock
========================================================================
   Trend Micro Safe Lock consists of an agent program called Safe Lock
   that resides on endpoints and a server program called Safe Lock
   Intelligent Manager that manages agents.

   Trend Micro Safe Lock Intelligent Manager provides centralized
   monitoring and management of Trend Micro Safe Lock agent deployment,
   status, and events. For example, administrators can remotely deploy
   agents, create initial agent Approved Lists, and change agent
   Application Lockdown states. Additionally, Safe Lock Intelligent
   Manager performs malware scans and administrators can view root
   cause information on files blocked from running by Safe Lock agents,
   reducing the time and effort needed to verify events and allowing
   quick responses to incidents.

   Trend Micro Safe Lock agents protects fixed-function computers like
   Industrial Control Systems (ICS), Point of Sale (POS) terminals,
   and kiosk terminals from malicious software and unauthorized use.
   By using fewer resources and without the need for regular software
   or system updates, Safe Lock agents can reliably secure compu ters
   in industrial and commercial environments with little performance impact
   or downtime.


2. What's New
========================================================================

   2.1 Safe Lock Intelligent Manager
   =====================================================================
       NOTE: The agent program that resides on endpoints is referred
       to as Safe Lock agent, and the server program that manages 
       agents is referred to as Safe Lock Intelligent Manager.

       Trend Micro Safe Lock Intelligent Manager 2.0 Service Pack 1
       Patch 3 includes the following features and benefits:

       - Support for Windows Storage Server 2016.

       - Support for SQL Server 2016 and SQL Server 2017.
       
       - Support for Fileless Attack Prevention management to monitor 
         processes, process chains and command line arguments.

       - Remote application of update patches to selected agents
         from Safe Lock Intelligent Manager.

       - Enhanced Audit Log to support multiple filters on the 
         Agent Event and Server Event screens.

       - Option to sort agents according to agent version in the 
         Agent Events screen.

       - Option to export a list of deployed endpoints and trusted 
         hashes from the Server Events screen.

       - Support installer flag for Trusted Hash list import/export.

       - Improved command deployment details screen.

       - Intelligent Manager can support up to 100,000 agents.

       - Enhanced debug log collection for Intelligent Manager in  
         Diagnostic Console to help user analyze problems.


   2.2 Safe Lock agents
   =====================================================================
   Trend Micro Safe Lock agent 2.0 Service Pack 1 Patch 3 includes the 
   following new features and benefits:

       - Support for Windows 10 Professional, Fall Creators Update  
         (Redstone 3), April 2018 Update (Redstone 4) and Windows 
         Storage Server 2016.

       - Support for Fileless Attack Prevention to monitor processes, 
         process chains and command line arguments.

       - Enhanced Windows Event Log with hash value of the 
         blocked/allowed files added.

       - Default size of Windows Event Log increased to 10 MB.

       - Support for the Secure Boot option of Windows 10.

       - Support for new Setup.ini options to enable/disable the  
         Trend Micro signature check for remote patch. 

       - Support for updating NAT settings via SLCmd.exe commands or 
         agent configuration import.

       - Enhanced debug log settings for Safe Lock agent in Setup.ini, 
         for improved troubleshooting of issues.
      

3. Documentation Set
========================================================================
   In addition to this readme.txt, the documentation set for this product 
   includes the following:

   - Installation Guide (IG): Provides product overview, deployment plan, 
     installation steps, and basic information intended to help you deploy 
     Trend Micro Safe Lock Intelligent Manager.

   - Administrator's Guide (AG): Provides post-installation instructions on 
     how to configure the settings to help you get Trend Micro Safe Lock 
     Intelligent Manager "up and running". Also includes instructions on 
     performing other administrative tasks for the maintenance of Trend Micro
     Safe Lock Intelligent Manager and for the deployment and maintenance of 
     Trend Micro Safe Lock agents.

   - Knowledge Base: Provides a searchable database of known product
     issues, including specific problem-solving and troubleshooting topics.

     http://esupport.trendmicro.com


4. System Requirements
========================================================================

   4.1 Safe Lock Intelligent Manager
   =====================================================================

       4.1.1 Hardware Requirements
       =================================================================
       NOTE: Trend Micro Safe Lock Intelligent Manager has specific 
       requirements that vary based on other software running 
       on the server endpoint.

             Safe Lock Intelligent Manager:
             - Minimum
                - RAM: 2GB
                - Processor: 1 CPU core
                - Available Disk Space: 10GB
             - Recommended
                - RAM: 4GB or more
                - Processor: 1 CPU core or more
                - Available Disk Space: 20GB

             Safe Lock Intelligent Manager (with Safe Lock agent)
             - Minimum
                - RAM: 2GB
                - Processor: 1 CPU core
                - Available Disk Space: 10GB
             - Recommended
                - RAM: 4GB or more
                - Processor: 2 CPU cores or more
                - Available Disk Space: 20GB

             Safe Lock Intelligent Manager + Microsoft SQL Server 2008 R2 Express SP2
             (with or without Safe Lock agent)
             - Minimum
                - RAM: 4GB
                - Processor: 1 CPU core
                - Available Disk Space: 30GB
             - Recommended
                - RAM: 8GB or more
                - Processor: 2 CPU cores or more
                - Available Disk Space: 50GB

             Safe Lock Intelligent Manager + Microsoft SQL Server 2008/2012/2014/2016/2017
             (with or without Safe Lock agent)
             - Minimum
                - RAM: 32GB
                - Processor: 2 CPU cores
                - Available Disk Space: 1TB
             - Recommended
                - RAM: 32GB or more
                - Processor: 4 CPU cores or more
                - Available Disk Space: 2TB or more

             Monitor and resolution: XGA (1024x768), 16 bit colors

             NOTE: CPU are only Intel 64 and IA-32 Architectures supported.

         4.1.2 Supported Operating Systems
         ===============================================================
         Trend Micro Safe Lock Intelligent Manager can be installed 
         on the following Microsoft Windows platforms:

            Windows Clients:
            - Windows 7 (NoSP/SP1) [Enterprise/Ultimate] (32/64bit)
            - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
            - Windows 8.1 (NoSP) [Pro/Enterprise] (32/64bit)
            - Windows 10 [Enterprise/IoT Enterprise] (32/64bit)
              Anniversary Update, Creators Update

            Windows Server:
            - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage] (32/64bit)
            - Windows Server 2008 R2 [Standard/Enterprise/Storage] (NoSP/SP1) (64bit)
            - Windows Server 2012 (NoSP) [Foundation/Essentials/Standard/Datacenter] (64bit)
            - Windows Server 2012 R2 (NoSP) [Foundation/Essentials/Standard/Datacenter] (64bit)
            - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)
            - Windows Server 2016 (NoSP) [Standard] (64bit)
            - Windows Storage Server 2016 (64bit)

         4.1.3 IIS Requirements
         ===============================================================
         NOTE: Safe Lock Intelligent Manager has specific requirements
         for IIS that vary based on other software running on the server endpoint.

            Windows Clients:
            - Windows 7: IIS 7.5
            - Windows 8: IIS 8.0
            - Windows 8.1: IIS 8.5
            - Windows 10: IIS 10.0

            Windows Server:
            - Windows Server 2008: IIS 7.0
            - Windows Server 2008 R2: IIS 7.5
            - Windows Server 2012: IIS 8.0
            - Windows Server 2012 R2: IIS 8.0
            - Windows Server 2016: IIS 10.0
            - Windows Storage Server 2016: IIS 10.0
 
         4.1.4 SQL Server Requirements
         ===============================================================
         Safe Lock Intelligent Manager requires one of the following
         versions of SQL Server:

               - Microsoft SQL Server 2008 R2 Express SP2
                 An installer is included in the Safe Lock Intelligent 
                 Manager Setup package.
                 NOTE: Microsoft SQL Server 2008 R2 Express SP2 requires
                 Microsoft .NET Framework 3.5 Service Pack 1.

               - Microsoft SQL Server 2008/2012/2014/2016/2017 (recommended)
                 NOTE: Safe Lock Intelligent Manager without Microsoft 
                 SQL Server 2008 R2 Express SP2 requires 
                 Microsoft .NET Framework 2.0 Service Pack 2.

         4.1.5 Browser Requirements (for web console)
         ===============================================================
         Safe Lock Intelligent Manager web console access requires one of 
         the following web browsers:

               - Microsoft Internet Explorer 9.0, 10.0, 11.0 (32/64bit)
               - The latest version of Google Chrome / Chrome Portable
               - Mozilla Firefox 6 or later

               NOTE: Older versions of Internet Explorer are unsupported 
               for security enhancement.

   4.2 Safe Lock agents
   =====================================================================

        4.2.1 Hardware Requirements
        ===============================================================
        Trend Micro Safe Lock agents does not have specific hardware 
        requirements beyond those specified by the operating system, with
        the following exceptions:

              - Available free disk space: 300MB
              - Monitor and resolution: VGA (640x480), 16 colors

              NOTE: CPU are only Intel 64 and IA-32 Architectures supported.


        4.2.2 Supported Operating Systems
        ===============================================================
        Safe Lock agents can be installed in the following Microsoft 
        Windows platforms:

              Windows:
              - Windows 2000 (SP4) [Professional] (32bit)
              - Windows XP (SP1/SP2/SP3) [Professional] (32bit)
              - Windows Vista (NoSP/SP1/SP2) [Business/Enterprise/Ultimate] (32bit)
              - Windows 7 (NoSP/SP1) [Professional/Enterprise/Ultimate] (32/64bit)
              - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
              - Windows 8.1 (NoSP) [Pro/Enterprise/ with Bing] (32/64bit)
              - Windows 10 [Pro/Enterprise/IoT Enterprise] (32/64bit)
                Anniversary Update, Creators Update, Fall Creators Update,
                April 2018 Update
              - Windows XP Embedded (SP1/SP2) (32bit)
              - Windows Embedded Standard 2009 (NoSP) (32bit)
              - Windows Embedded Standard 7 (NoSP/SP1) (32/64bit)
              - Windows Embedded 8 Standard (NoSP) (32/64bit)
              - Windows Embedded 8.1 Pro [Pro/Industry Pro](NoSP) (32/64bit)
              - Windows XP Professional for Embedded Systems (SP1/SP2/SP3) (32bit)
              - Windows Vista for Embedded Systems (NoSP/SP1/SP2) (32bit)
              - Windows 7 for Embedded Systems (NoSP/SP1) (32/64bit)
              - Windows Embedded POSReady (32bit)
              - Windows Embedded POSReady 2009 (32bit)
              - Windows Embedded POSReady 7 (32/64bit)

              Windows Server:
              - Windows 2000 Server SP4 (32bit)
              - Windows Server 2003 (SP1/SP2) [Standard/Enterprise/Storage] (32bit)
              - Windows Server 2003 R2 (NoSP/SP1/SP2) [Standard/Enterprise/Storage] (32bit)
              - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage] (32/64bit)
              - Windows Server 2008 R2 (NoSP/SP1) [Standard/Enterprise/Storage] (64bit)
              - Windows Server 2012 (NoSP) [Essentials/Standard] (64bit)
              - Windows Server 2012 R2 (NoSP) [Essentials/Standard] (64bit)
              - Windows Server 2016 (NoSP) [Standard] (64bit)
              - Windows Storage Server 2016 (64bit)
              - Windows Server 2003 for Embedded Systems (SP1/SP2) (32bit)
              - Windows Server 2003 R2 for Embedded Systems (NoSP/SP2) (32bit)
              - Windows Server 2008 for Embedded Systems (SP1/SP2) (32/64bit)
              - Windows Server 2008 R2 for Embedded Systems (NoSP/SP1) (64bit)
              - Windows Server 2012 for Embedded Systems (NoSP) (64bit)
              - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)


5. Installation
========================================================================
   For information, see the Installation Guide.


6. Known Issues
========================================================================

   6.1 Safe Lock Intelligent Manager
   =====================================================================
   Known issues in this release:

   6.1.1 Installation and Uninstallation
   =====================================================================
   a. Installed Safe Lock 1.x agents block and prevent the installation 
      of Trend Micro Safe Lock Intelligent Manager.
      Trend Micro Safe Lock Intelligent Manager must be installed before
      Trend Micro Safe Lock agent when installing both on the same 
      endpoint. Safe Lock agent can be installed after installation of 
      Safe Lock Intelligent Manager is complete.

   b. During Safe Lock Intelligent Manager re-installations using an 
      existing Microsoft SQL Server, any mismatch between the original 
      Safe Lock Intelligent Manager server IP address and the new 
      Safe Lock Intelligent Manager server IP address results in the 
      original Safe Lock Intelligent Manager database being erased and
      a new database being used.

   c. Safe Lock agents Trusted Updater or Predefined Trusted Updater
      do not support the installation of Trend Micro Safe Lock 
      Intelligent Manager. Remove Safe Lock agent from the endpoint 
      before installing Safe Lock Intelligent Manager. Safe Lock agents
      can be installed after installation of Safe Lock Intelligent 
      Manager is complete.

   d. Safe Lock Intelligent Manager remote installations to endpoints 
      running Windows 2000 Server may not automatically reboot even if 
      the reboot is needed.

   e. Safe Lock Intelligent Manager remote installations may not succeed
      because the svchost.exe process can end unexpectedly in the 
      following versions of Windows:
      - Windows 2000 (SP4)
      - Windows Server 2003 (SP1/SP2)
      - Windows XP (SP1/SP2/SP3)

   f. After installing the Safe Lock agent and Safe Lock Intelligent
      Manager together on an endpoint running Windows Server 2008 
      without SP2, then specifying IIS 7.0 as the web server, the 
      Safe Lock Intelligent Manager web console and applications using
      IIS 7.0 may not work as expected.

   g. The installer may not launch if there is not enough disk space on
      the target endpoint. Ensure that the target endpoint meets the 
      specified requirement for free space.

   h. Safe Lock Intelligent Manager is unable to remotely uninstall
      Safe Lock agents on Windows 7 or later version from 
      Windows Server 2008. Windows Server 2008 R2 does not have an issue.

   i. Safe Lock Intelligent Manager 2.0 SP1 Patch 2 no longer supports
      installation on Windows XP or Windows Server 2003.
      To update existing installations of Safe Lock Intelligent Manager 
      2.0 SP1 Patch 1 or earlier on these platforms, install 
      the SP1 Patch 2 or later cumulative patch module.

   6.1.2 Web Console
   =====================================================================
   a. Google Chrome blocks downloaded packages of Trend Micro Safe Lock
      agent from the web console.

   b. Long group names on the Agent Management directory may be
      corrupted when the web console is accessed through Internet
      Explorer. This issue can be avoided by using Chrome or Firefox.

   c. The close button on the Dashboard page may not function if the
      console is accessed through Chrome or Firefox and that another
      dialog box from the browser has just been closed.

   d. Component version may be displayed incorrectly on the web console
      if the Intelligent Manager server is updated during a component
      update.

   e. Command Deployment Status shows random characters after clicking
      a Download link in Internet Explorer 7 or 8 when an Internet 
      Explorer's security setting(Downloads > Automatic prompting for 
      file downloads is disabled).

   f. IIS server 7.0 or below is associated with a delay (typically 10 
      seconds) during the first Trend Micro Safe Lock Intelligent 
      Manager web console log on.

   g. Intelligent Manager may not be able to restart on Windows 10 after
      a system reboot if the hardware specifications are low.
      To resolve the issue, consider changing the ServicesPipeTimeout 
      value to 1 minute or more.

      Find the value in the following path and key:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
      "ServicesPipeTimeout" (milliseconds)

   6.1.3 Agent Communication
   =====================================================================
   a. When a script is blocked, two messages are recorded in the Windows
      Event Log. For example, *.bat will be blocked twice by Safe Lock
      agents and will therefore create two block events.

   b. Network antivirus software may prevent files containing known
      malicious content from being sent from Safe Lock agents to Safe 
      Lock Intelligent Manager for scanning.

   c. In some cases, if a Safe Lock agent is unable to send a blocked 
      file to Safe Lock Intelligent Manager for scanning, Safe Lock
      Intelligent Manager reports the status of the file as 
      "Pending Scan". However, in these cases, the file is never sent 
      and the status is permanently reported as "Pending Scan".

   d. Safe Lock Intelligent Manager is unable to sync license status to
      agents after the Safe Lock Intelligent Manager license expires.
      Specify a valid Activation Code in Trend Micro Safe Lock
      Intelligent Manager to keep licenses consistent if your Activation
      Code expires.

   e. Without updating the existing installations of Safe Lock Intelligent
      Manager 2.0 SP1 Patch 2 or earlier, new events from Safe Lock agents 
      might be displayed with blank or wording code in Agent Events screen.
          
   6.1.4 SLtasks
   =====================================================================
   a. The SLtasks.exe command, "--removeitems", only supports CSV files
      in the UTF-8 format.

   b. Intelligent Manager is unable to export or save files with long
      file names. A long name file is truncated when the file is 
      exported or saved.

   c. If Administrators try to check connection for a certain agent 
      after cancel the check connection for a lot of agents, the
      "Check Connection" window will stay at the screen for a long time
      until all the other test connection process are finished.

   6.1.5 File Hash Generator
   =====================================================================
   a. Long file names on the File Hash Generator interface may not be
      fully displayed these files names are hovered over with a cursor.

   b. The banner on the File Hash Generator interface may disappear when
      the DPI is set to 125% or above.

   6.1.6 Miscellaneous
   =====================================================================
   a. Root cause analysis is unable to indicate information for blocked
      files located on mapped network drives.

   b. When Safe Lock Intelligent Manager uses a local server requiring
      authentication (UNC) for updates, Windows XP, 7, 8, and 8.1 are 
      sometimes unable maintain enough simultaneous network connections
      to update all specified components.

   c. Safe Lock agents are unable to upload their debug log to
      Trend Micro Safe Lock Intelligent Manager if that debug log is 
      over 2GB.

   6.2 Safe Lock agents
   =====================================================================
   For information, see Readme file for Safe Lock agents.


7. Contact Information
========================================================================
   A license to the Trend Micro software usually includes the right to
   product updates, pattern file updates, and basic technical support
   for one (1) year from the date of purchase only. After the first
   year, Maintenance must be renewed on an annual basis at
   Trend Micro's then-current Maintenance fees.

   You can contact Trend Micro via fax, phone, and email, or visit us at:

   http://www.trendmicro.com

   Evaluation copies of Trend Micro products can be downloaded from
   our web site.

   Global Mailing Address/Telephone Numbers
   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   For global contact information in the Asia/Pacific region, Australia
   and New Zealand, Europe, Latin America, and Canada, refer to:

   http://www.trendmicro.com/en/about/overview.htm

   The Trend Micro "About Us" screen displays. Click the appropriate
   link in the "Contact Us" section of the screen.

   Note: This information is subject to change without notice.


8. About Trend Micro
========================================================================
   Trend Micro Incorporated, a global leader in Internet content
   security and threat management, aims to create a world safe for the
   exchange of digital information for businesses and consumers. A 
   pioneer in server-based antivirus with over 20 years of experience,
   we deliver top-ranked security that fits our customers' needs, stops
   new threats faster, and protects data in physical, virtualized and
   cloud environments. Powered by the Trend Micro(TM) Smart Protection
   Network(TM) infrastructure, our industry-leading cloud-computing 
   security technology and products stop threats where they emerge, on
   the Internet, and are supported by 1,000+ threat intelligence 
   experts around the globe. For additional information, visit 
   www.trendmicro.com.

   Copyright 2018, Trend Micro Incorporated. All rights reserved.
   
   Trend Micro, the t-ball logo and Safe Lock are trademarks of Trend
   Micro Incorporated and are registered in some jurisdictions. All 
   other product or company names may be trademarks or registered 
   trademarks of their owners.


9. License Agreement
========================================================================
   Information about your license agreement with Trend Micro can be 
   viewed at:

   http://us.trendmicro.com/us/about/company/user_license_agreements/

   Third-party licensing agreements can be viewed by selecting the
   "About" option in the application user interface.