Cisco Trust Agent (CTA), a program hosted within the OfficeScan server and installed to clients, enables the OfficeScan client to report antivirus information to Cisco ACS.
During OfficeScan server installation/upgrade, an option is available to install/upgrade CTA on clients. If you selected this option, OfficeScan automatically installs/upgrades CTA to all the clients that the server will manage.
If you did not select the option to install/upgrade CTA during server installation, you can do so from the Web console. Before installing/upgrading CTA, you must deploy the client certificate to clients. When you are ready to install/upgrade, check the version of the CTA to be installed in Cisco NAC > Agent Upgrade, then install CTA to clients in Cisco NAC > Agent Deployment. The Agent Deployment screen also gives you the option to uninstall CTA.
Notes:
You must install Windows Installer 2.0 for NT 4.0 on OfficeScan clients
running Windows 2000/XP before deploying CTA. CTA does not support Microsoft
Vista.
A Certificate Authority (CA) server generates the client certificate
file. You can request a certificate file from your Trend Micro representative.
Cisco NAC > Agent Deployment
In the client tree, select the client that will install/upgrade or uninstall Cisco Trust Agent.
Click Deploy Agent.
Note: You cannot proceed if you did not accept the terms of the Cisco License Agreement during the installation of the OfficeScan server. When you click Deploy Agent, the license information appears again. Read the license agreement and click Yes to agree to the terms.
Select the task you want to perform.
To install/upgrade, click Install/Upgrade Cisco Trust Agent and then click Save. Optionally select to uninstall the Cisco Trust Agent during OfficeScan client uninstallation.
To remove the agent, click Uninstall Cisco Trust Agent.
Note: If the client is not online when you perform any of the tasks, OfficeScan automatically fulfills the task request when the client becomes online.
Select to preserve the existing status of the Cisco Trust Agent.
If you select domain(s) or client(s), click Save to apply settings to the selected domain(s) or client(s).
If you select the root icon 
:
Apply to All Clients: Applies settings to all existing clients and to any new client added to an existing/future domain. Future domains are domains not yet created at the time you configure the settings.
Apply to Future Domains Only: Applies settings only to clients added to future domains. This option will not apply settings to new clients added to an existing domain.
Cisco NAC > Agent Management
Before installing CTA to clients, check this screen for the CTA version (Cisco Trust Agent or Cisco Trust Agent Supplicant) to install. The only difference between these two versions is that the Supplicant package provides layer 2 authentication for the computer and end user. You can change the version to install by clicking Use {CTA version} in the screen.
If your Cisco NAC Access Control Server (ACS) is version 4.0 or later, you must upgrade the Cisco Trust Agent on the clients to version 2.0 or later.
You can manually replace the CTA package on the OfficeScan server if there is a specific version you want to use.
In the CTA version you want to use, copy the CTA .msi file to the following folder:
{OfficeScan installation folder}\OfficeScan\PCCSRV\Admin\Utility\CTA\CTA-Package
OR
{OfficeScan installation folder}OfficeScan\PCCSRV\Admin\Utility\CTA\CTA-Supplicant-Package
Copy the following files to {OfficeScan
installation folder}\OfficeScan\PCCSRV\Admin\Utility\CTA\
PosturePlugin: TmabPP.dll, tmabpp.inf and TmAbPpAct.exe.
In the Web console, go to Cisco NAC > Agent Management and click Use {CTA version}.
After agent upgrade, CTA packages the deployment files as PostureAgent.zip and saves it under {OfficeScan installation folder}OfficeScan\PCCSRV\download\Product.