This topic discusses how to install TMAgent Manager and deploy Threat Management Agent. For details on managing TMAgent Manager, refer to the Help available from the TMAgent Manager console.
Trend Micro OfficeScan provides a framework (called Plug-in Manager) for deploying security solutions to many endpoints across different platforms. TMAgent Manager is one of the plug-in programs available from Plug-in Manager and is intended for deploying Threat Management Agent to endpoints managed by the OfficeScan server.
Note:
TMAgent Manager can only deploy the agent to endpoints managed by the
OfficeScan server. If you have several OfficeScan servers, install TMAgent
Manager on each server so you can deploy the agent to endpoints managed
by these servers.
To deploy the agent to endpoints not managed by any OfficeScan server,
use the other agent deployment methods.
TMAgent Manager is useful in the following situations:
In an environment that does not automatically deploy Threat Management Agent to endpoints, TMAgent Manager can find agentless endpoints and then deploy the agent.
Threat Management Agent can report to both Threat Mitigator and Trend Micro Network VirusWall™ Enforcer. If you have previously set up Network VirusWall Enforcer server, you can configure agents reporting to this server to also report to Threat Mitigator from TMAgent Manager.
If you have several Threat Mitigator servers, you can configure an agent to report to the other servers from TMAgent Manager.
Like all other OfficeScan plug-in programs, The TMAgent Manager installation package is made available from the OfficeScan server’s update source. The default update source is the Trend Micro ActiveUpdate server. However, OfficeScan administrators can set up a custom update source.
When TMAgent Manager is available for download from the update source, it displays on the Plug-in Manager console so you can launch the installation. Plug-in Manager installs TMAgent Manager on the same computer that hosts the OfficeScan server and Plug-in Manager. After the installation, a separate TMAgent Manager console is created and can be accessed from within the OfficeScan server and the Plug-in Manager consoles. MORE >>
TMAgent Manager requires the following resources:
OfficeScan server 8.0 Service Pack 1 or later
Plug-in Manager 1.0 (apply the latest patch, if available)
Note: For OfficeScan and Plug-in Manager installation requirements and instructions, refer to the documentation for these products.
OfficeScan server update source (only if the update source is not the ActiveUpdate server)
Ensure that the server computer can connect to the first update source on the list found on the OfficeScan server console’s Server Update Source screen (navigate to Updates > Server > Update Source). If the server computer cannot connect to the first update source, it does not attempt to connect to the other update sources.
Check if the first update source contains the latest version of the Plug-in Manager component list (OSCE_AOS_COMP_LIST.xml) and the TMAgent Manager installation package.
Log on to the OfficeScan server’s Web console and click Plug-in Manager on the main menu.
Go to the TMAgent Manager section and click Download.
Note:
Plug-in Manager downloads the package to <OfficeScan server
installation folder>\PCCSRV\Download\Product.
<OfficeScan server installation folder> is typically C:\Program
Files\Trend Micro\OfficeScan.
Monitor the download progress. You can navigate away from the screen during the download.
If you encounter problems downloading the package, check the server update logs on the OfficeScan Web console. On the main menu, click Logs > Server Update Logs.
After Plug-in Manager downloads the package, a new screen with the following options displays: Install Now or Install Later.
If you click Install Now, agree to the license agreement and then check the installation progress.
If you click Install Later:
Open the OfficeScan Web console and click Plug-in Manager on the main menu.
Go to the TMAgent Manager section and click Install.
Agree to the license agreement and then check the installation progress.
After the installation finishes, the Plug-in Manager screen displays the TMAgent Manager version.
Verify that TMAgent Manager was installed successfully.
The following folder exists: <OfficeScan server installation folder>\Addon\PEAgentManagerServer.
<OfficeScan server installation folder> is typically C:\Program Files\Trend Micro\OfficeScan.
The TMAgent Manager registry key exists. HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PEAgentManagerServer
From the TMAgent Manager console, add all the Threat Mitigator servers you have set up. When you deploy the agent, you will be prompted to select the Threat Mitigator server to which the agent reports its status.
Note: TMAgent Manager is only used for agent deployment. The agent needs to report to a Threat Mitigator server to run mitigation tasks.
When agent deployment starts, TMAgent Manager sends a command to the endpoint to download and install TMAgent Manager client, followed by the Threat Management Agent. MORE >>
TMAgent Manager client serves as the communication channel between Threat Management Agent and TMAgent Manager. The Threat Management Agent will not be installed if there are problems installing this program. TMAgent Manager client displays on the OfficeScan client’s Plug-in Manager screen.
After TMAgent Manager client installs, Threat Management Agent begins to install. You can check the agent deployment status from the TMAgent Manager console.
When agent deployment is complete, the agent reports its status to its parent Threat Mitigator server. You can query the agent from the Threat Mitigator console. The agent also sends status information to TMAgent Manager.
Part 1: Adding Threat Mitigator to the server list
On the TMAgent Manager section, click Manage Program.
Click Manage Server List from the main menu.
Specify Threat Mitigator’s IP address, description, and port number in the fields provided.
Click Add Server. The server name and address appears in the server list.
Part 2: Deploying the agent
From the client tree on the left section of the screen, select the endpoints to which to deploy the agent.
To select all endpoints belonging to a client tree group, click the check box before the group name.
Note: The group names are identical with the domain names on the OfficeScan server’s client tree.
To select specific endpoints, click the group name and then select the endpoints from the endpoint list on the main window.
Click Deploy to Endpoints. The Deploy to Endpoints screen appears.
Select the Select Threat Mitigator server option.
Select Threat Mitigator from the server list.
Click Deploy. A confirmation message displays, informing you that agent deployment has started. Refresh the screen after a few minutes to check the deployment result.