<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>

  Trend Micro, Inc.                                 October 09, 2019

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Trend Micro Safe Lock(TM) Intelligent Manager TXOne Edition

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  NOTE: This readme file was current as of the date above.
  However, all customers are advised to check the Trend Micro website
  for documentation updates at:

  http://docs.trendmicro.com/

  Trend Micro always seeks to improve its documentation.
  If you have questions, comments, or suggestions about this or any
  Trend Micro documents, please contact us at docs@trendmicro.com.
  Your feedback is always welcome.

  Please evaluate this documentation on the following site:
  http://docs.trendmicro.com/en-us/survey.aspx


  Contents
========================================================================

  1. About Trend Micro Safe Lock

  2. What's New

  3. Documentation Set

  4. System Requirements

  5. Installation

  6. Known Issues

  7. Release History

  8. Contact Information

  9. About Trend Micro

  10. About TXOne Networks

  11. License Agreement

========================================================================


1. About Trend Micro Safe Lock
========================================================================
  Trend Micro Safe Lock consists of an agent program
  called Safe Lock that resides on endpoints and a server program
  called Safe Lock Intelligent Managerthat manages agents.

  Trend Micro Safe Lock Intelligent Manager provides centralized
  monitoring and management of Trend Micro Safe Lock agent deployment,
  status, and events. For example, administrators can remotely deploy
  agents, create initial agent Approved Lists, and change agent
  Application Lockdown states. Additionally, Safe Lock Intelligent
  Manager performs malware scans and administrators can view root cause
  information on files blocked from running by Safe Lock agents,
  reducing the time and effort needed to verify events and allowing
  quick responses to incidents.

  Trend Micro Safe Lock agents protects fixed-function computers like
  Industrial Control Systems (ICS), Point of Sale (POS) terminals, and
  kiosk terminals from malicious software and unauthorized use.
  By using fewer resources and without the need for regular software
  or system updates, Safe Lock agents can reliably secure compu ters
  in industrial and commercial environments with little performance
  impact or downtime.


2. What's New
========================================================================

  2.1 Trend Micro Safe Lock Intelligent Manager
  ====================================================================
  NOTE: The agent program that resides on endpoints is referred
  to as Safe Lock agent, and the server program that manages agents
  is referred to as Safe Lock Intelligent Manager.

  Trend Micro Safe Lock Intelligent Manager includes the following
  features and benefits:

  - New agent commands:
    - Configure Maintainance Mode: The administrator can define a 
      time period when all file executions are allowed to perform 
      patch updates on endpoints.
    - Add Trusted USB Device: When device control is enabled, the 
      administrator can configure trusted USB storage devices to
      allow USB device access on endpoints.

  - A new command is provided on the Safe Lock Intelligent Manager 
    server to allow the administrator to transfer Safe Lock agents
    to a new server. 

  2.2 Trend Micro Safe Lock agent
  =====================================================================
  Trend Micro Safe Lock agent includes the following new features
  and benefits:

  - Support Maintenance Mode configuration to perform updates on 
    during the specified maintenance period when Safe Lock allows 
    all file executions and adds all files that are created, executed, 
    or modified to the Approved List.

  - Trusted USB storage device support when Device Control is enabled to
    allow USB device access on endpoints.

  - Include new prescan parameters (FORCE_PRESCAN and PRESCANCLEANUP) 
    in the setup file for Windows installer to perform mandatory
    endpoint scanning before agent installation.


3. Documentation Set
========================================================================
  To download or view electronic versions of the documentation set for 
  this product, go to http://docs.trendmicro.com

  - Installation Guide (IG): The Installation Guide contains
    information on requirements and procedures for installing and
    deploying Trend Micro Safe Lock Intelligent Manager.

  - Administrator's Guide (AG): Provides post-installation
    instructions on how to configure the settings to help you get Trend
    Micro Safe Lock Intelligent Manager "up and running". Also includes
    instructions on performing other administrative tasks for the
    maintenance of Trend Micro Safe Lock Intelligent Manager and for
    the deployment and maintenance of Trend Micro Safe Lock agents.

  - Support Portal: The Support Portal contains information on
    troubleshooting and resolving known issues.

  To access the Support Portal, go to http://esupport.trendmicro.com


4. System Requirements
======================================================================

  4.1 Trend Micro Safe Lock Intelligent Manager
  ==================================================================

  4.1.1 Hardware Requirements
  =================================================================
  NOTE: Trend Micro Safe Lock Intelligent Manager has specific
  requirements that vary based on other software running on the server
  endpoint.

  Safe Lock Intelligent Manager:
    - Minimum
    - RAM: 2GB
    - Processor: 1 CPU core
    - Available Disk Space: 10GB
    - Recommended
    - RAM: 4GB or more
    - Processor: 1 CPU core or more
    - Available Disk Space: 20GB

  Safe Lock Intelligent Manager (with Safe Lock agent):
    - Minimum
    - RAM: 2GB
    - Processor: 1 CPU core
    - Available Disk Space: 10GB
    - Recommended
    - RAM: 4GB or more
    - Processor: 2 CPU cores or more
    - Available Disk Space: 20GB

  Safe Lock Intelligent Manager + Microsoft SQL Server 2008 R2 Express
  SP2 (with or without Safe Lock agent):
    - Minimum
    - RAM: 4GB
    - Processor: 1 CPU core
    - Available Disk Space: 30GB
    - Recommended
    - RAM: 8GB or more
    - Processor: 2 CPU cores or more
    - Available Disk Space: 50GB

  Safe Lock Intelligent Manager + Microsoft SQL Server 2008/2012/2014/
  2016/2017 (with or without Safe Lock agent):
    - Minimum
    - RAM: 32GB
    - Processor: 2 CPU cores
    - Available Disk Space: 1TB
    - Recommended
    - RAM: 32GB or more
    - Processor: 4 CPU cores or more
    - Available Disk Space: 2TB or more

  Monitor and resolution: XGA (1024x768), 16 bit colors

  NOTE: Trend Micro Safe Lock supports only CPUs with Intel 64 and 
        IA-32 Architectures.

  4.1.2 Supported Operating Systems
  ===============================================================
  Trend Micro Safe Lock Intelligent Manager can be
  installed on the following Microsoft Windows platforms:

  Windows Clients:
    - Windows 7 (NoSP/SP1) [Enterprise/Ultimate] (32/64bit)
    - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 8.1 (NoSP) [Pro/Enterprise] (32/64bit)
    - Windows 10 [Enterprise/IoT Enterprise] (32/64bit)
      Anniversary Update, Creators Update

  Windows Server:
    - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage]
      (32/64bit)
    - Windows Server 2008 R2 [Standard/Enterprise/Storage] (NoSP/SP1)
      (64bit)
    - Windows Server 2012 (NoSP) [Foundation/Essentials/Standard/
      Datacenter] (64bit)
    - Windows Server 2012 R2 (NoSP) [Foundation/Essentials/Standard/
      Datacenter] (64bit)
    - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)
    - Windows Server 2016 (NoSP) [Standard] (64bit)
    - Windows Storage Server 2016 (64bit)

  4.1.3 IIS Requirements
  ===============================================================
  NOTE: Trend Micor Safe Lock Intelligent Manager has
  specific requirements for IIS that vary based on other software
  running on the server endpoint.

  Windows Clients:
    - Windows 7: IIS 7.5
    - Windows 8: IIS 8.0
    - Windows 8.1: IIS 8.5
    - Windows 10: IIS 10.0

  Windows Server:
    - Windows Server 2008: IIS 7.0
    - Windows Server 2008 R2: IIS 7.5
    - Windows Server 2012: IIS 8.0
    - Windows Server 2012 R2: IIS 8.0
    - Windows Server 2016: IIS 10.0
    - Windows Storage Server 2016: IIS 10.0

  4.1.4 SQL Server Requirements
  ===============================================================
  Safe Lock Intelligent Manager requires one of the
  following versions of SQL Server:

  - Microsoft SQL Server 2008 R2 Express SP2:
    An installer is included in the Safe Lock Intelligent Manager 
    Setup package.

  NOTE: Microsoft SQL Server 2008 R2 Express SP2 requires Microsoft
        .NET Framework 3.5 Service Pack 1.

  - Microsoft SQL Server 2008/2012/2014/2016/2017 (recommended):

  NOTE: Safe Lock Intelligent Manager without Microsoft SQL Server
        2008 R2 Express SP2 requires Microsoft .NET Framework 2.0 
        Service Pack 2.

  4.1.5 Browser Requirements (for web console)
  ===============================================================
  Trend Micro Safe Lock Intelligent Manager web console access
  requires one of the following web browsers:

    - Microsoft Internet Explorer 9.0, 10.0, 11.0 (32/64bit)
    - Microsoft Edge
    - The latest version of Google Chrome / Chrome Portable
    - Mozilla Firefox 6 or later

  NOTE: Older versions of Internet Explorer are unsupported for
        security reasons.

  4.2 Trend Micro Safe Lock agents
  ====================================================================

  4.2.1 Hardware Requirements
  ===============================================================
  Trend Micro Safe Lock agents does not have specific
  hardware requirements beyond those specified by the operating system,
  with the following exceptions:

  - Available free disk space: 300MB
  - Monitor and resolution: VGA (640x480), 16 colors

  NOTE: Trend Micro Safe Lock supports only CPUs with Intel 64 
        and IA-32 Architectures.

  4.2.2 Supported Operating Systems
  ===============================================================
  Safe Lock agents can be installed in the following
  Microsoft Windows platforms:

  Windows Clients:
  - Windows 2000 (SP4) [Professional] (32bit)
  - Windows XP (SP1/SP2/SP3) [Professional] (32bit)
  - Windows Vista (NoSP/SP1/SP2) [Business/Enterprise/Ultimate]
    (32bit)
  - Windows 7 (NoSP/SP1) [Professional/Enterprise/Ultimate]
    (32/64bit)
  - Windows 8 (NoSP) [Pro/Enterprise] (32/64bit)
  - Windows 8.1 (NoSP) [Pro/Enterprise/with Bing] (32/64bit)
  - Windows 10 [Pro/Enterprise/IoT Enterprise] (32/64bit)
    Anniversary Update, Creators Update, Fall Creators Update,
    April 2018 Update, October 2018 Update
  - Windows XP Embedded (SP1/SP2) (32bit)
  - Windows Embedded Standard 2009 (NoSP) (32bit)
  - Windows Embedded Standard 7 (NoSP/SP1) (32/64bit)
  - Windows Embedded 8 Standard (NoSP) (32/64bit)
  - Windows Embedded 8.1 Pro [Pro/Industry Pro](NoSP) (32/64bit)
  - Windows XP Professional for Embedded Systems (SP1/SP2/SP3)
    (32bit)
  - Windows Vista for Embedded Systems (NoSP/SP1/SP2) (32bit)
  - Windows 7 for Embedded Systems (NoSP/SP1) (32/64bit)
  - Windows Embedded POSReady (32bit)
  - Windows Embedded POSReady 2009 (32bit)
  - Windows Embedded POSReady 7 (32/64bit)

  Windows Server:
  - Windows 2000 Server SP4 (32bit)
  - Windows Server 2003 (SP1/SP2) [Standard/Enterprise/Storage]
    (32bit)
  - Windows Server 2003 R2 (NoSP/SP1/SP2) [Standard/Enterprise/
    Storage] (32bit)
  - Windows Server 2008 (SP1/SP2) [Standard/Enterprise/Storage]
    (32/64bit)
  - Windows Server 2008 R2 (NoSP/SP1) [Standard/Enterprise/Storage]
    (64bit)
  - Windows Server 2012 (NoSP) [Essentials/Standard] (64bit)
  - Windows Server 2012 R2 (NoSP) [Essentials/Standard] (64bit)
  - Windows Server 2016 (NoSP) [Standard] (64bit)
  - Windows Storage Server 2016 (64bit)
  - Windows Server 2003 for Embedded Systems (SP1/SP2) (32bit)
  - Windows Server 2003 R2 for Embedded Systems (NoSP/SP2) (32bit)
  - Windows Server 2008 for Embedded Systems (SP1/SP2) (32/64bit)
  - Windows Server 2008 R2 for Embedded Systems (NoSP/SP1) (64bit)
  - Windows Server 2012 for Embedded Systems (NoSP) (64bit)
  - Windows Server 2012 R2 for Embedded Systems (NoSP) (64bit)


5. Installation
========================================================================
  For information, see the Installation Guide.


6. Known Issues
========================================================================

  6.1 Trend Micro Safe Lock Intelligent Manager
  ====================================================================
  Known issues in this release:

  6.1.1 Installation and Uninstallation
  ====================================================================
  a. When installing both programs on the same endpoint, Trend Micro 
     Safe Lock Intelligent Manager must be installed before the Trend 
     Micro Safe Lock agent. The Safe Lock agent can be installed after
     the installation of Safe Lock Intelligent Manager is complete.

  b. During Safe Lock Intelligent Manager re-installations using an 
     existing Microsoft SQL Server, any discrepancy between the  
     original Safe Lock Intelligent Manager server IP address and the 
     new Safe Lock Intelligent Manager server IP address results in  
     the original Safe Lock Intelligent Manager database being erased 
     and a new database being used.

  c. The Trusted Updater or Predefined Trusted Updater of Safe Lock 
     agents do not support the installation of Trend Micro Safe Lock 
     Intelligent Manager. Remove the Safe Lock agent from the endpoint
     before installing Safe Lock Intelligent Manager. Safe Lock agents
     can be installed after the installation of Safe Lock Intelligent 
     Manager is complete.

  d. Safe Lock Intelligent Manager remote installations on endpoints 
     running Windows 2000 Server may not automatically reboot even if 
     the reboot is needed.

  e. Safe Lock Intelligent Manager remote installations may not succeed
     because the svchost.exe process can terminate unexpectedly in the
     following versions of Windows:
     - Windows 2000 (SP4)
     - Windows Server 2003 (SP1/SP2)
     - Windows XP (SP1/SP2/SP3)

  f. If the Safe Lock agent and Safe Lock Intelligent Manager are 
     both installed on an endpoint running Windows Server 2008 
     without SP2, using IIS 7.0 as the web server may cause the Safe 
     Lock Intelligent Manager web console and applications using 
     IIS 7.0 to not work as expected.

  g. The installer may not launch if there is not enough disk space
     on the target endpoint. Ensure that the target endpoint meets 
     the specified requirement for free space.

  h. Safe Lock Intelligent Manager is unable to remotely uninstall
     Safe Lock agents on Windows 7 or later from a Windows Server 2008
     endpoint. This issue does not occur on Windows Server 2008 R2.

  6.1.2 Web Console
  ====================================================================
  a. Google Chrome blocks downloaded packages of Trend Micro Safe Lock
     agent from the web console.

  b. Long group names on the Agent Management directory may be corrupted
     when the web console is accessed through Internet Explorer.
     This issue can be avoided by using Chrome or Firefox.

  c. When the console is accessed through Chrome or Firefox, the close
     button on the Dashboard page may not function correctly if another
     dialog box from the browser has just been closed.

  d. Component versions may be displayed incorrectly on the web console
     if the Intelligent Manager server is updated during a component
     update.

  e. The Command Deployment Status shows random characters after 
     clicking a Download link in Internet Explorer 7 or 8 if Internet 
     Explorer's security setting(Downloads > Automatic prompting for 
     file downloads) is disabled.

  f. IIS server 7.0 or below is associated with a delay (typically 
     10 seconds) during the first Trend Micro Safe Lock Intelligent 
     Manager web console log on.

  g. Intelligent Manager may not be able to restart on Windows 10
     after a system reboot if the hardware specifications are low.
     To resolve the issue, update the ServicesPipeTimeout value to 1
     minute or more.

     Find the value in the following path and key:
     - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
       "ServicesPipeTimeout" (milliseconds)

  h. If Administrators try to check the connection for one agent after
     cancelling the connection check for a lot of agents, the "Check
     Connection" window remains at the screen for a long time until all
     the other check connection tasks are finished.

  i. If a user changes his password on a Safe Lock Intelligent Manager
     that is registered to a Trend Micro Control Manager server, the 
     password on the Trend Micro Control Manager server must also be 
     updated. Otherwise, the user account may be locked out after 
     multiple logon retries.  

  j. Help content for Trend Micro Safe Lock widgets are not accessible
     if the Trend Micro Control Manager server is not connected to the
     internet.
 
  6.1.3 Agent Communication
  ====================================================================
  a. When a script is blocked, the agent records two messages in the
     Windows Event Log. For example, *.bat will be blocked twice by
     Safe Lock agents and will therefore create two block events.

  b. Network antivirus software may prevent files containing known
     malicious content from being sent from Safe Lock agents to Safe 
     Lock Intelligent Manager for scanning.

  c. In some cases, if a Safe Lock agent is unable to send a blocked 
     file to Safe Lock Intelligent Manager for scanning, Safe Lock
     Intelligent Manager reports the status of the file as 
     "Pending Scan". However, in these cases, the file is never sent 
     and the status is permanently reported as "Pending Scan".

  d. Safe Lock Intelligent Manager is unable to synchronize license 
     status to agents after the Safe Lock Intelligent Manager license 
     expires. Specify a valid Activation Code in Trend Micro 
     Safe Lock Intelligent Manager if your Activation Code expires.

  6.1.4 SLtasks
  ====================================================================
  a. The SLtasks.exe command "--removeitems" only supports CSV files
     in the UTF-8 format.

  b. Safe Lock Intelligent Manager is unable to export or save files
     with long file names. A long name file is truncated when the file
     is exported or saved.

  c. If the secure port for log collection and status update is
     disconnected during the Safe Lock agent transfer process, the agent
     might not be unregistered from the original Intelligent Manager. 

  6.1.5 File Hash Generator
  ====================================================================
  a. Long file names on the File Hash Generator interface may not be
     fully displayed whenever a cursor hovers over these files names.

  b. The banner on the File Hash Generator interface may disappear if
     the DPI is set to 125% or above.

  6.1.6 Miscellaneous
  ====================================================================
  a. Root cause analysis is unable to indicate information for blocked
     files located on mapped network drives.

  b. When Safe Lock Intelligent Manager uses a local server requiring
     authentication (UNC) for updates, endpoints running Windows XP, 7,
     8, and 8.1 might not be able to maintain simultaneous network
     connections to update all specified components.

  c. Safe Lock agents are unable to upload their debug log to Trend
     Micro Safe Lock Intelligent Manager if the debug log is over 2GB.

  6.2 Trend Micro Safe Lock agents
  ====================================================================
  For information, see Readme file for Safe Lock agents.


7. Release History
========================================================================
  For more information about updates to this product, go to:
  http://www.trendmicro.com/download

  Previous releases include the following:

  Trend Micro Safe Lock Intelligent Manager TXOne Edition
  - October 09, 2019


8. Contact Information
========================================================================
  A license to Trend Micro software usually includes the right to
  product updates, pattern file updates, and basic technical support
  for one (1) year from the date of purchase only. After the first
  year, you must renew Maintenance on an annual basis at Trend Micro's
  then-current Maintenance fees.

  Contact Trend Micro via fax, phone, and email, or visit our website
  to download evaluation copies of Trend Micro products.

  http://www.trendmicro.com/us/about-us/contact/index.html

  NOTE: This information is subject to change without notice.


9. About Trend Micro
========================================================================
  Trend Micro Incorporated, a global leader in Internet content
  security and threat management, aims to create a world safe for the
  exchange of digital information for businesses and consumers.
  A pioneer in server-based antivirus with over 20 years of experience,
  we deliver top-ranked security that fits our customers' needs, stops
  new threats faster, and protects data in physical, virtualized and
  cloud environments. Powered by the Trend Micro(TM) Smart Protection
  Network(TM) infrastructure, our industry-leading cloud-computing 
  security technology and products stop threats where they emerge, on
  the Internet, and are supported by 1,000+ threat intelligence 
  experts around the globe. For additional information, visit 
  www.trendmicro.com.

  Copyright 2019, Trend Micro Incorporated. All rights reserved.

  Trend Micro, the t-ball logo and Safe Lock are trademarks of Trend
  Micro Incorporated and are registered in some jurisdictions. All 
  other product or company names may be trademarks or registered 
  trademarks of their owners.


10. About TXOne Networks
========================================================================
  TXOne Networks Inc. is a joint-venture between Trend Micro Inc. and
  Moxa Inc.

  TXOne Network Inc. offers cybersecurity solutions to protect 
  industrial control systems (ICS) and ensure reliability and safety 
  from cyberattacks.


11. License Agreement
========================================================================
  View information about your license agreement with Trend Micro at: 
  www.trendmicro.com/us/about-us/legal-policies/license-agreements

  Third-party licensing agreements can be viewed:
  - By selecting the "About" option in the application user interface
  - By referring to the "Legal" page of the Administrator's Guide