Component Update Policy | Trend Micro Service Central

Views:

Configure component update policies to meet security compliance requirements for your environment.

Important

Component update policy controls and settings are pre-release sub-features and are not part of the existing features of an official commercial or general release. Please review the Pre-release Sub-Feature Disclaimer before using the sub-features.

This feature is not available in all regions.

Component update policies allow you to control which version of the security component updates supported endpoints receive when performing daily security updates. You can choose to allow selected endpoints to always update to the latest versions of the security components, or select a snapshot of the component versions to update to. Snapshots are a set of component versions based on a daily recording of releases taken at the same time every day.

Endpoint Inventory currently supports configuring the component update policies for Windows and Linux endpoint agents managed by Standard Endpoint Protection and Server & Workload Protection. To configure the update schedules for your endpoints:

For Standard Endpoint Protection, access the managing product server and go to Updates → Agents → Automatic Update.

To configure update settings within the Protection Manager, see Component Updates.
For Server & Workload Protection, go to Endpoint Security → Server & Workload Security → Administration → Scheduled Tasks and create a component update task.

To configure update settings, see Apply security updates.

Important

Applying agent software updates, whether automatically or manually, also updates the components to the latest version available, regardless of the current component update policy settings.

In the Endpoint Inventory screen, you can perform the actions listed in the following table to monitor and manage the component update policies.

Action	Description
Set component update policies	Select the endpoints you want to configure and click the Component updates drop-down in the endpoint actions section of the screen and click Set Update Policy To configure the component update policies for your endpoints, see Configuring the Component Update Policy.
Pause updates	Select the endpoints you want to pause updates and click the Component updates drop-down in the endpoint actions section of the screen and click Pause Updates Pausing updates temporarily stops the endpoints from updating according to their update schedule configured by the Protection Manager. Endpoints might take some time to synchronize with the requested action.
Resume updates	Select the endpoints you want to resume updates and click the Component updates drop-down in the endpoint actions section of the screen and click Resume Updates Resuming updates ends the paused state for component updates. Endpoints might take some time to synchronize with the requested action.
Filter view by policy and status	Use the add filter icon () to search for endpoints by agent policy, component policy, update status, or component version
Show/Hide component policy columns	Use the Show/Hide Columns icon () to view or hide the Component update policy and Component update status columns The Component update policy column shows the currently applied update policy. If the endpoint is using an older component version than what is expected for the assigned policy, the text in the column appears red. The Component update status column shows if updates for the endpoints are scheduled or paused.
View version details	Click the Default and Global Settings icon () and click Component Version Details In the Component Version Details screen, use the tabs to view the component versions and which snapshots your endpoints are assigned. Version Details: Displays the component versions for n (latest version) and each prior snapshot. Update Policies: Displays the component update policies currently assigned to endpoints and the number of assigned endpoints based on the update status (Scheduled or Paused). Click on the number to filter the Endpoint Inventory list to show the specified endpoints.