Encryption Management for Apple FileVault Automatic Deployment

Procedure

1. Place the installation files into the the same directory.
   Installer.sh, InstallPreCheck, and Trend Micro Full Disk Encryption.pkg must be in the same directory for automated deployment to run successfully. This procedure assumes those files have been placed in the directory /var/tmp for later example command scripts.
2. In a command line interface, run Installer.sh with the directory of the installation files as the first parameter.
   An example command script is as follows:

   $ sudo /var/tmp/Installer.sh /var/tmp

   Installer.sh will call InstallPreCheck to check your environment for potential issues that could hinder deployment or agent use. If any issues are found, the return code of the issue will be returned. If no issues are found, Installer.sh will execute Trend Micro Full Disk Encryption.pkg to perform installation.

   For potential error codes and limitations of Encryption Management for Apple FileVault deployment, see Encryption Management for Apple FileVault Preinstallation Return Codes.
3. If Installer.sh returns code 106, check the version of a currently installed Encryption Management for Apple FileVault agent.
   Return code 106 means that Encryption Management for Apple FileVault is already installed.

   To check the currently installed version, run the following command script:

   $ defaults read "/Applications/Encryption Management for
   Apple FileVault.app/Contents/Info.plist"
   CFBundleShortVersionString

   To check the version of the intended agent deployment package, run the following command script:

   $ /var/tmp/InstallPreCheck version

   If the intended version is later than the currently installed version, upgrade Encryption Management for Apple FileVault instead of continuing deployment. See Upgrading Encryption Management for Apple FileVault.
4. If installation of Encryption Management for Apple FileVault proceeded successfully, run the RegisterDevice executable with your enterprise credentials as parameters to register the agent to PolicyServer.
   The RegisterDevice executable is located in the agent directory. The default RegisterDevice path is /Library/Application Support/TrendMicro/FDEMM/RegisterDevice.

   In order, add the HOST, ENTERPRISE, USERNAME, and PASSWORD arguments as parameters. Encryption Management for Apple FileVault supports encrypted values of these arguments by adding e before the argument name. For example, an encrypted argument of PASSWORD is ePASSWORD.

   For help creating the RegisterDevice command script, see Command Builder.
   The following is an example of the intended agent registration command script:

   $ sudo“/Library/Application Support/TrendMicro/FDEMM/
   RegisterDevice"
   HOST=10.1.152.58 ENTERPRISE=MyCompany USERNAME=User
   ePASSWORD==5mih67uKdy7TlVaN2ISWGQQ=

   After agent registration, the Encryption Management for Apple FileVault agent deployment is complete.