Deploy agents using the installer package

Views:

Download the installer package to deploy the TrendAI Vision One™ Endpoint Security agent to your endpoints.

Important

The installer package requires an internet connection to download required software, register the agent with your instance, and receive configuration information such as policy settings. Verify that your endpoint can connect to the internet either directly or using the Agent Installer Proxy Settings.

Your TrendAI Vision One™ account must have permission to download the agent package to complete this task. If you are unable to view or download the installer, contact your administrator for assistance.

The agent installer package is a lightweight download which carries configuration data to allow your endpoint to download and install the necessary protection software and settings from TrendAI Vision One™. You can also download the installer package and host the file on a local server or other storage for use as a custom download source with agent deployment scripts.

Use this method to configure the installation package to ensure your newly-deployed agents:

Install Standard Endpoint Protection or Server & Workload Protection features as needed
Install Endpoint Sensor features including XDR for Endpoints (EDR)
Report to the correct Endpoint Group Manager
Automatically apply the correct default settings

For other installation methods, see:

To install agents using the offline installer package, see Deploy agents using the offline installer package.
To install agents using a deployment script, see Deploy agents using the deployment script.

If you plan to use a custom package download source for your deployment script, configure and download the installer package first.

Note

clock_icon=4b003b65-3058-4609-b2e5-a7e5b7b57973.png

The installation process typically takes about five minutes to complete. Certain variables can affect the duration of the task, such as the specific OS version and distribution, package configuration, network connectivity, and endpoint hardware configuration.

refresh=5bd75452-c2fb-43ed-90e6-7b552fdc5dd2.png

Deployment typically does not require you to restart the endpoint to complete installation. Restarting the endpoint after installation can help with verifying system stability, but is not required.

Procedure

Go to Endpoint Security → Endpoint Inventory.
Click Agent Installer.
For Deployment method, select Installer package.
Select the Endpoint group you want to assign to the new agent.
Selecting the endpoint group in this step determines which protection features to install.
- Selecting a group managed by Standard Endpoint Protection installs Standard Endpoint Protection features.
- Selecting a group managed by Server & Workload Protection installs Server & Workload Protection features.
- Selecting the group Default for sensor installs agents with only Endpoint Sensor features.

Configure the operating system settings.

Setting		Standard Endpoint Protection	Server & Workload Protection	Sensor only
Operating system		Setting is automatic based on the Endpoint group you select: Windows macOS	Choose from: Windows Linux	Choose from: Windows Linux macOS
OS version / Distribution	Windows	-	If you want the installer to automatically detect the Windows version of the target endpoint, select Auto-detect. Otherwise, select the specific Windows version for the installer.	-
	Linux	-	If you want the installer to automatically detect the Linux distribution version of the target endpoint, select Auto-detect. Otherwise, select the specific Linux distribution for the installer.	If you want the installer to automatically detect the Linux distribution version of the target endpoint, select Auto-detect. Otherwise, select the specific Linux distribution for the installer.
	macOS	-	-	-
OS architecture	Windows	Choose from: 64-bit (x86-64 32-bit (x86) ARM64 (AArch64)	-	Choose from: 64-bit (x86-64 32-bit (x86) ARM64 (AArch64)
	Linux	-	Choose from: 64-bit (x86-64 ARM64 (AArch64)	Choose from: 64-bit (x86-64 ARM64 (AArch64)
	macOS	-	-	-

Select the Agent installer proxy.

Choose one of the options for the agent installer to connect with TrendAI Vision One™. The default selection is to use the Agent Installer Proxy Settings in Endpoint Inventory Global Settings.
- Use Agent Installer Proxy Settings: The installer package follows your configured Agent Installer Proxy Settings.
- Service Gateway name: Select a specific Service Gateway to act as the proxy. Only Service Gateways with the Forward Proxy service enabled appear on the list.
- Use the custom proxy specified in Agent Installer Proxy Settings: The installer package ignores all other configurations and only uses the custom proxy configured in Agent Installer Proxy Settings.
- System proxy: The installer uses the proxy settings of the endpoint system.
- Direct connect: The installer connects directly to TrendAI Vision One™ services.
Click the Download installer icon ().

Unpack the installation package on the target endpoint.

Important

Do not rename, alter, or move any files or folders in the installation package.
For Standard Endpoint Protection deployments, the installer package can automatically uninstall existing security solutions (except TrendAI™ solutions) during installation if not password-protected. If your current antivirus solution has a password, remove the password before running the installer.

To check which third-party security solutions can be automatically uninstalled by the agent installer, refer to the Standard Endpoint Protection FAQs.

Run the installation package on your target endpoints.
- For Windows endpoints, run EndpointBasecamp.exe to install the agent.
- For macOS endpoints, double-click endpoint_basecamp.pkg to install the agent.
- For Linux endpoints, open terminal and run the command # ./tmxbc install to install the agent.
Note

For macOS endpoints, you must provide administrator credentials to complete the installation.
The installation package installs the TrendAI Vision One™ Endpoint Security agent with the feature package based on the target endpoint group.