Views:

Prerequisites

Item
Requirements
System requirements
Same as Trend Micro Apex One server and Security Agent
License
  • Included in the Apex One Full Feature for Windows and Mac license
  • An existing Trend Micro Endpoint Application Control license (activated in Trend Micro Apex Central)
Apex Central registration
Required for licensing and Security Agent policy deployment
Compatibility with Trend Micro Endpoint Application Control
  • Server: The Trend Micro Apex One server with Application Control can exist on the same server with Trend Micro Endpoint Application Control (not recommended).
    Important
    Important
    Trend Micro Endpoint Application Control server settings are not compatible with the Apex One Application Control feature. You must manually configure all policies using the Trend Micro Apex Central web console.
  • Agent: Once you deploy an Application Control policy to the Apex One Security Agent, the Security Agent automatically uninstalls any existing Trend Micro Endpoint Application Control agent before applying the Apex One Application Control settings.

Fresh Installation Information

Type
Description
Server
The Apex One Setup program installs the Application Control feature automatically during normal Trend Micro Apex One server installation.
After verifying that the Activation Code includes Application Control, Trend Micro Apex One starts the Trend Micro Application Control Service on the Trend Micro Apex One server computer.
Agent
The Security Agent program includes but does not immediately install the Application Control Service during normal Security Agent installation. To install the Apex One Application Control feature on the Security Agent, you must enable and deploy an Application Control policy from the Trend Micro Apex Central web console.
Once the Security Agent receives the Application Control settings, the Security Agent installs the Application Control feature.

Installation Verification

Type
Description
Trend Micro Apex One server
After installing the Trend Micro Apex One server with a valid license for the feature, you can verify the following:
  • The Trend Micro Application Control Service is running on the Trend Micro Apex One server computer.
  • The Application Control Service folder exists on the Trend Micro Apex One server computer in the following location:
    <Server installation folder>/iServiceSvr/iAC
  • The Application Control Service installation log exists on the Trend Micro Apex One server computer in the following location:
    %windir%/OFCMAS.LOG
Security Agent endpoint
After installing the Security Agent and deploying an Application Control policy from Trend Micro Apex Central, you can verify the following:
  • The Trend Micro Application Control Service (Agent) is running on the Security Agent endpoint.
  • The Application Control Service folder exists on the endpoint in the following location:
    <Security Agent installation folder>/iService/iAC

Post Installation Configuration

Settings
Description
Server
On the Trend Micro Apex Central web console, go to Administration → Updates → Manual Update and ensure that you download the Certified Safe Software Pattern.
Security Agent endpoint
On the Trend Micro Apex Central web console, go to Policies → Policy Management and add or modify the Application Control Settings for the Apex One Security Agent policies as required.