<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>

  Trend Micro, Inc.                                 January 21, 2019

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

            Trend Micro Safe Lock(TM) Intelligent Manager 2.0 
                        Service Pack 1 Patch 4

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   NOTE: This readme file was current as of the date above. However,
   all customers are advised to check the Trend Micro website for
   documentation updates at:

     http://docs.trendmicro.com/

   Trend Micro always seeks to improve its documentation. If you have
   questions, comments, or suggestions about this or any Trend Micro
   documents, please contact us at docs@trendmicro.com. Your feedback
   is always welcome.

   Please evaluate this documentation on the following site:
   http://www.trendmicro.com/download/documentation/rating.asp


   Contents
   ===================================================================

   1. About Safe Lock

   2. What's New
      2.1 Safe Lock Intelligent Manager
      2.2 Safe Lock Agents

   3. Documentation Set

   4. System Requirements
      4.1 Safe Lock Intelligent Manager
          4.1.1 Hardware Requirements
          4.1.2 Supported Operating Systems
          4.1.3 IIS Requirements
          4.1.4 SQL Server Requirements
          4.1.5 Browser Requirements (for web console)
      4.2 Safe Lock agents
          4.2.1 Hardware Requirements
          4.2.2 Supported Operating Systems

   5. Installation

   6. Known Issues
      6.1 Safe Lock Intelligent Manager
      6.2 Safe Lock agents

   7. Contact Information

   8. About Trend Micro

   9. License Agreement

   ===================================================================


1. About Trend Micro Safe Lock
========================================================================
   Trend Micro Safe Lock consists of an agent program called Safe Lock
   that resides on endpoints and a server program called Safe Lock
   Intelligent Manager that manages agents.

   Trend Micro Safe Lock Intelligent Manager provides centralized
   monitoring and management of Trend Micro Safe Lock agent deployment,
   status, and events. For example, administrators can remotely deploy
   agents, create initial agent Approved Lists, and change agent
   Application Lockdown states. Additionally, Safe Lock Intelligent
   Manager performs malware scans and administrators can view root
   cause information on files blocked from running by Safe Lock agents,
   reducing the time and effort needed to verify events and allowing
   quick responses to incidents.

   Trend Micro Safe Lock agents protects fixed-function computers like
   Industrial Control Systems (ICS), Point of Sale (POS) terminals,
   and kiosk terminals from malicious software and unauthorized use.
   By using fewer resources and without the need for regular software
   or system updates, Safe Lock agents can reliably secure compu ters
   in industrial and commercial environments with little performance
   impact or downtime.


2. What's New
========================================================================

    2.1 Safe Lock Intelligent Manager
    ====================================================================
    NOTE: The agent program that resides on endpoints is referred
    to as Safe Lock agent, and the server program that manages 
    agents is referred to as Safe Lock Intelligent Manager.

    Trend Micro Safe Lock Intelligent Manager 2.0 Service Pack 1
    Patch 4 includes the following features and benefits:

    - Safe Lock Intelligent Manager adds integration with Control
      Manager 7.0, which allows Control Manager to perform
      the following:
      1) Access the Safe Lock Intelligent Manager management console
         (via Single-Sign On).
      2) Display Safe Lock Intelligent Manager dashboard widgets.

    - Safe Lock Intelligent Manager monitors the agent's connection
      status. If the setting is enabled, Safe Lock Intelligent
      Manager can send notifications whenever an agent is disconnected.

   2.2 Safe Lock agents
   =====================================================================
    Trend Micro Safe Lock agent 2.0 Service Pack 1 Patch 4 includes the 
    following new features and benefits:

    - Support for Windows 10 October 2018 Update (Redstone 5).

    - Include additional enhancements to the DLL/Driver Lockdown feature
      to improve the performance of hash checks done on the Approved 
      List.

    - Improve event handling for situations when the Approve List is
      not yet initialized.

    - Add the option to exclude a folder path or file extension from
      automatic file enumeration during Approved List initialization.

3. Documentation Set
========================================================================
    In addition to this readme.txt, the documentation set for this
    product includes the following:

    - Installation Guide (IG): Provides product overview, deployment
      plan, installation steps, and basic information intended to help
      you deploy Trend Micro Safe Lock Intelligent Manager.

    - Administrator's Guide (AG): Provides post-installation
      instructions on how to configure the settings to help you get 
      Trend Micro Safe Lock Intelligent Manager "up and running". Also 
      includes instructions on performing other administrative tasks 
      for the maintenance of Trend Micro Safe Lock Intelligent Manager 
      and for the deployment and maintenance of Trend Micro Safe 
      Lock agents.

    - Knowledge Base: Provides a searchable database of known product
      issues, including specific problem-solving and troubleshooting
      topics.

    http://esupport.trendmicro.com


4. System Requirements
======================================================================

    4.1 Safe Lock Intelligent Manager
    ==================================================================

    4.1.1 Hardware Requirements
    =================================================================
    NOTE: Trend Micro Safe Lock Intelligent Manager has specific 
    requirements that vary based on other software running 
    on the server endpoint.

    Safe Lock Intelligent Manager:
        - Minimum
        - RAM: 2GB
        - Processor: 1 CPU core
        - Available Disk Space: 10GB
        - Recommended
        - RAM: 4GB or more
        - Processor: 1 CPU core or more
        - Available Disk Space: 20GB

    Safe Lock Intelligent Manager (with Safe Lock agent)
        - Minimum
        - RAM: 2GB
        - Processor: 1 CPU core
        - Available Disk Space: 10GB
        - Recommended
        - RAM: 4GB or more
        - Processor: 2 CPU cores or more
        - Available Disk Space: 20GB

    Safe Lock Intelligent Manager + Microsoft SQL Server 2008 R2
    Express SP2 (with or without Safe Lock agent)
        - Minimum
        - RAM: 4GB
        - Processor: 1 CPU core
        - Available Disk Space: 30GB
        - Recommended
        - RAM: 8GB or more
        - Processor: 2 CPU cores or more
        - Available Disk Space: 50GB

    Safe Lock Intelligent Manager + Microsoft SQL Server
    2008/2012/2014/2016/2017 (with or without Safe Lock agent)
        - Minimum
        - RAM: 32GB
        - Processor: 2 CPU cores
        - Available Disk Space: 1TB
        - Recommended
        - RAM: 32GB or more
        - Processor: 4 CPU cores or more
        - Available Disk Space: 2TB or more

    Monitor and resolution: XGA (1024x768), 16 bit colors

    NOTE: CPU are only Intel 64 and IA-32 Architectures supported.

    4.1.2 Supported Operating Systems
    ===============================================================
    Trend Micro Safe Lock Intelligent Manager can be installed 
    on the following Microsoft Windows platforms:

    Windows Clients:
    - Windows 7 (NoSP/SP1) [Enterprise/Ultimate] (32/64bit)
    - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 8.1 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 10 [Enterprise/IoT Enterprise] (32/64bit)
        Anniversary Update, Creators Update

    Windows Server:
    - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage]
        (32/64bit)
    - Windows Server 2008 R2 [Standard/Enterprise/Storage] (NoSP/SP1)
        (64bit)
    - Windows Server 2012 (NoSP) [Foundation/Essentials/Standard/
        Datacenter] (64bit)
    - Windows Server 2012 R2 (NoSP) [Foundation/Essentials/Standard/
        Datacenter] (64bit)
    - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)
    - Windows Server 2016 (NoSP) [Standard] (64bit)
    - Windows Storage Server 2016 (64bit)

    4.1.3 IIS Requirements
    ===============================================================
    NOTE: Safe Lock Intelligent Manager has specific requirements
    for IIS that vary based on other software running on the server
    endpoint.

    Windows Clients:
        - Windows 7: IIS 7.5
        - Windows 8: IIS 8.0
        - Windows 8.1: IIS 8.5
        - Windows 10: IIS 10.0

    Windows Server:
        - Windows Server 2008: IIS 7.0
        - Windows Server 2008 R2: IIS 7.5
        - Windows Server 2012: IIS 8.0
        - Windows Server 2012 R2: IIS 8.0
        - Windows Server 2016: IIS 10.0
        - Windows Storage Server 2016: IIS 10.0

    4.1.4 SQL Server Requirements
    ===============================================================
    Safe Lock Intelligent Manager requires one of the following
    versions of SQL Server:

    - Microsoft SQL Server 2008 R2 Express SP2
        An installer is included in the Safe Lock Intelligent 
        Manager Setup package.
        NOTE: Microsoft SQL Server 2008 R2 Express SP2 requires
        Microsoft .NET Framework 3.5 Service Pack 1.

    - Microsoft SQL Server 2008/2012/2014/2016/2017 (recommended)
        NOTE: Safe Lock Intelligent Manager without Microsoft 
        SQL Server 2008 R2 Express SP2 requires Microsoft .NET
        Framework 2.0 Service Pack 2.

    4.1.5 Browser Requirements (for web console)
    ===============================================================
    Safe Lock Intelligent Manager web console access requires one
    of the following web browsers:

    - Microsoft Internet Explorer 9.0, 10.0, 11.0 (32/64bit)
    - Microsoft Edge
    - The latest version of Google Chrome / Chrome Portable
    - Mozilla Firefox 6 or later

    NOTE: Older versions of Internet Explorer are unsupported for
    security enhancement.

    4.2 Safe Lock agents
    ====================================================================

    4.2.1 Hardware Requirements
    ===============================================================
    Trend Micro Safe Lock agents does not have specific hardware 
    requirements beyond those specified by the operating system,
    with the following exceptions:

    - Available free disk space: 300MB
    - Monitor and resolution: VGA (640x480), 16 colors

    NOTE: CPU are only Intel 64 and IA-32 Architectures supported.

    4.2.2 Supported Operating Systems
    ===============================================================
    Safe Lock agents can be installed in the following Microsoft 
    Windows platforms:

    Windows Clients:
    - Windows 2000 (SP4) [Professional] (32bit)
    - Windows XP (SP1/SP2/SP3) [Professional] (32bit)
    - Windows Vista (NoSP/SP1/SP2) [Business/Enterprise/Ultimate]
        (32bit)
    - Windows 7 (NoSP/SP1) [Professional/Enterprise/Ultimate]
        (32/64bit)
    - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 8.1 (NoSP) [Pro/Enterprise/with Bing] (32/64bit)
    - Windows 10 [Pro/Enterprise/IoT Enterprise] (32/64bit)
        Anniversary Update, Creators Update, Fall Creators Update,
        April 2018 Update, October 2018 Update
    - Windows XP Embedded (SP1/SP2) (32bit)
    - Windows Embedded Standard 2009 (NoSP) (32bit)
    - Windows Embedded Standard 7 (NoSP/SP1) (32/64bit)
    - Windows Embedded 8 Standard (NoSP) (32/64bit)
    - Windows Embedded 8.1 Pro [Pro/Industry Pro](NoSP) (32/64bit)
    - Windows XP Professional for Embedded Systems (SP1/SP2/SP3)
        (32bit)
    - Windows Vista for Embedded Systems (NoSP/SP1/SP2) (32bit)
    - Windows 7 for Embedded Systems (NoSP/SP1) (32/64bit)
    - Windows Embedded POSReady (32bit)
    - Windows Embedded POSReady 2009 (32bit)
    - Windows Embedded POSReady 7 (32/64bit)

    Windows Server:
    - Windows 2000 Server SP4 (32bit)
    - Windows Server 2003 (SP1/SP2) [Standard/Enterprise/Storage]
        (32bit)
    - Windows Server 2003 R2 (NoSP/SP1/SP2) [Standard/Enterprise/
        Storage] (32bit)
    - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage]
        (32/64bit)
    - Windows Server 2008 R2 (NoSP/SP1) [Standard/Enterprise/
        Storage] (64bit)
    - Windows Server 2012 (NoSP) [Essentials/Standard] (64bit)
    - Windows Server 2012 R2 (NoSP) [Essentials/Standard] (64bit)
    - Windows Server 2016 (NoSP) [Standard] (64bit)
    - Windows Storage Server 2016 (64bit)
    - Windows Server 2003 for Embedded Systems (SP1/SP2) (32bit)
    - Windows Server 2003 R2 for Embedded Systems (NoSP/SP2) (32bit)
    - Windows Server 2008 for Embedded Systems (SP1/SP2) (32/64bit)
    - Windows Server 2008 R2 for Embedded Systems (NoSP/SP1) (64bit)
    - Windows Server 2012 for Embedded Systems (NoSP) (64bit)
    - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)


5. Installation
========================================================================
    For information, see the Installation Guide.


6. Known Issues
========================================================================

    6.1 Safe Lock Intelligent Manager
    ====================================================================
    Known issues in this release:

    6.1.1 Installation and Uninstallation
    ====================================================================
    a. Installed Safe Lock 1.x agents block and prevent the 
       installation of Trend Micro Safe Lock Intelligent Manager.
       When installing both programs on the same endpoint, Trend Micro 
       Safe Lock Intelligent Manager must be installed before the Trend 
       Micro Safe Lock agent. The Safe Lock agent can be installed after 
       the installation of Safe Lock Intelligent Manager is complete.

    b. During Safe Lock Intelligent Manager re-installations using an 
       existing Microsoft SQL Server, any discrepancy between the  
       original Safe Lock Intelligent Manager server IP address and the  
       new Safe Lock Intelligent Manager server IP address results in  
       the original Safe Lock Intelligent Manager database being erased 
       and a new database being used.

    c. The Trusted Updater or Predefined Trusted Updater of Safe Lock 
       agents do not support the installation of Trend Micro Safe Lock 
       Intelligent Manager. Remove the Safe Lock agent from the endpoint 
       before installing Safe Lock Intelligent Manager. Safe Lock agents
       can be installed after the installation of Safe Lock Intelligent 
       Manager is complete.

    d. Safe Lock Intelligent Manager remote installations on endpoints 
       running Windows 2000 Server may not automatically reboot even if 
       the reboot is needed.

    e. Safe Lock Intelligent Manager remote installations may not
       succeed because the svchost.exe process can terminate 
       unexpectedly in the following versions of Windows:
       - Windows 2000 (SP4)
       - Windows Server 2003 (SP1/SP2)
       - Windows XP (SP1/SP2/SP3)

    f. If the Safe Lock agent and Safe Lock Intelligent Manager are 
       both installed on an endpoint running Windows Server 2008 
       without SP2, using IIS 7.0 as the web server may cause the Safe 
       Lock Intelligent Manager web console and applications using 
       IIS 7.0 to not work as expected.

    g. The installer may not launch if there is not enough disk space
       on the target endpoint. Ensure that the target endpoint meets 
       the specified requirement for free space.

    h. Safe Lock Intelligent Manager is unable to remotely uninstall
       Safe Lock agents on Windows 7 or later from a Windows Server 2008
       endpoint. This issue does not occur on Windows Server 2008 R2.

    i. Safe Lock Intelligent Manager 2.0 SP1 Patch 2 no longer supports
       installation on Windows XP or Windows Server 2003.
       To update existing installations of Safe Lock Intelligent Manager 
       2.0 SP1 Patch 1 or earlier on these platforms, install 
       the SP1 Patch 2 or later cumulative patch module.

    6.1.2 Web Console
    ====================================================================
    a. Google Chrome blocks downloaded packages of Trend Micro 
       Safe Lock agent from the web console.

    b. Long group names on the Agent Management directory may be
       corrupted when the web console is accessed through Internet
       Explorer. This issue can be avoided by using Chrome or Firefox.

    c. When the console is accessed through Chrome or Firefox, the close  
       button on the Dashboard page may not function correctly if 
       another dialog box from the browser has just been closed.

    d. Component versions may be displayed incorrectly on the web 
       console if the Intelligent Manager server is updated during a 
       component update.

    e. The Command Deployment Status shows random characters after 
       clicking a Download link in Internet Explorer 7 or 8 if Internet 
       Explorer's security setting(Downloads > Automatic prompting for 
       file downloads) is disabled.

    f. IIS server 7.0 or below is associated with a delay (typically 
       10 seconds) during the first Trend Micro Safe Lock Intelligent 
       Manager web console log on.

    g. Intelligent Manager may not be able to restart on Windows 10
       after a system reboot if the hardware specifications are low.
       To resolve the issue, update the ServicesPipeTimeout value 
       to 1 minute or more.

       Find the value in the following path and key:
       
       - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
         "ServicesPipeTimeout" (milliseconds)

    h. If Administrators try to check the connection for one agent 
       after cancelling the connection check for a lot of agents, the
       "Check Connection" window remains at the screen for a long time
       until all the other check connection tasks are finished.

    i. If a user changes his password on a Safe Lock Intelligent Manager 
       that is registered to a Trend Micro Control Manager server, the 
       password on the Trend Micro Control Manager server must also be 
       updated. Otherwise, the user account may be locked out after 
       multiple logon retries.  
      
    j. Help content for Trend Micro Safe Lock widgets are not accessible
       if the Trend Micro Control Manager server is not connected to
       the internet.

    6.1.3 Agent Communication
    ====================================================================
    a. When a script is blocked, the agent records two messages in the
       Windows Event Log. For example, *.bat will be blocked twice by
       Safe Lock agents and will therefore create two block events.

    b. Network antivirus software may prevent files containing known
       malicious content from being sent from Safe Lock agents to Safe 
       Lock Intelligent Manager for scanning.

    c. In some cases, if a Safe Lock agent is unable to send a blocked 
       file to Safe Lock Intelligent Manager for scanning, Safe Lock
       Intelligent Manager reports the status of the file as 
       "Pending Scan". However, in these cases, the file is never sent 
       and the status is permanently reported as "Pending Scan".

    d. Safe Lock Intelligent Manager is unable to sync license status 
       to agents after the Safe Lock Intelligent Manager license 
       expires. Specify a valid Activation Code in the Trend Micro 
       Safe Lock Intelligent Manager if your Activation Code expires.       

    e. Without updating the existing installations of Safe Lock
       Intelligent Manager 2.0 SP1 Patch 2 or earlier, new events from
       Safe Lock agents may be displayed as blank or random code in
       the Agent Events screen.

    6.1.4 SLtasks
    ====================================================================
    a. The SLtasks.exe command "--removeitems" only supports CSV files
       in the UTF-8 format.

    b. Intelligent Manager is unable to export or save files with long
       file names. A long name file is truncated when the file is 
       exported or saved.

    6.1.5 File Hash Generator
    ====================================================================
    a. Long file names on the File Hash Generator interface may not be
       fully displayed whenever a cursor hovers over these files names.

    b. The banner on the File Hash Generator interface may disappear
       if the DPI is set to 125% or above.

    6.1.6 Miscellaneous
    ====================================================================
    a. Root cause analysis is unable to indicate information for 
       blocked files located on mapped network drives.

    b. When Safe Lock Intelligent Manager uses a local server requiring
       authentication (UNC) for updates, endpoints running Windows XP, 
       7, 8, and 8.1 are sometimes unable maintain enough simultaneous 
       network connections to update all specified components.

    c. Safe Lock agents are unable to upload their debug log to
       Trend Micro Safe Lock Intelligent Manager if the debug log is
       over 2GB.

    6.2 Safe Lock agents
    ====================================================================
    For information, see Readme file for Safe Lock agents.


7. Contact Information
========================================================================
   A license to the Trend Micro software usually includes the right to
   product updates, pattern file updates, and basic technical support
   for one (1) year from the date of purchase only. After the first
   year, Maintenance must be renewed on an annual basis at
   Trend Micro's then-current Maintenance fees.

   You can contact Trend Micro via fax, phone, and email, or
   visit us at:

   http://www.trendmicro.com

   Evaluation copies of Trend Micro products can be downloaded from
   our web site.

   Global Mailing Address/Telephone Numbers
   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   For global contact information in the Asia/Pacific region, Australia
   and New Zealand, Europe, Latin America, and Canada, refer to:

   http://www.trendmicro.com/en/about/overview.htm

   The Trend Micro "About Us" screen displays. Click the appropriate
   link in the "Contact Us" section of the screen.

   Note: This information is subject to change without notice.


8. About Trend Micro
========================================================================
   Trend Micro Incorporated, a global leader in Internet content
   security and threat management, aims to create a world safe for the
   exchange of digital information for businesses and consumers. A 
   pioneer in server-based antivirus with over 20 years of experience,
   we deliver top-ranked security that fits our customers' needs, stops
   new threats faster, and protects data in physical, virtualized and
   cloud environments. Powered by the Trend Micro(TM) Smart Protection
   Network(TM) infrastructure, our industry-leading cloud-computing 
   security technology and products stop threats where they emerge, on
   the Internet, and are supported by 1,000+ threat intelligence 
   experts around the globe. For additional information, visit 
   www.trendmicro.com.

   Copyright 2019, Trend Micro Incorporated. All rights reserved.

   Trend Micro, the t-ball logo and Safe Lock are trademarks of Trend
   Micro Incorporated and are registered in some jurisdictions. All 
   other product or company names may be trademarks or registered 
   trademarks of their owners.


9. License Agreement
========================================================================
   Information about your license agreement with Trend Micro can be 
   viewed at:

   http://us.trendmicro.com/us/about/company/user_license_agreements/

   Third-party licensing agreements can be viewed by selecting the
   "About" option in the application user interface.