Deploy agents using the offline installer package

Views:

Important

The offline installer package is a "Pre-release" feature and is not considered an official release. Please review the Pre-Release Disclaimer before using the feature.
This feature is not available in all regions.
Offline installer package only supports Windows and Linux deployments.
While installation does not require an internet connection, the installed agent must be able to connect with TrendAI Vision One™ to register the agent with your instance, and receive configuration information such as runtime connection policy settings. Verify that your endpoint can connect to the internet either directly or using the Agent Installer Proxy Settings.
Your TrendAI Vision One™ account must have permission to download the agent package to complete this task. If you are unable to view or download the installer, contact your administrator for assistance.

The offline installer package deploys the TrendAI Vision One™ Endpoint Security agent without requiring an internet connection during installation.

TrendAI™ recommends configuring your default connection and endpoint settings before deploying agents.

Update your proxy settings and FQDNs to ensure endpoint connectivity.
Configure endpoint security policies to streamline the collection of activity data on new agents.

Use this method to configure the offline installer package to ensure your newly-deployed agents:

Install Anti-malware features as needed
Automatically apply the correct default settings

Note

Additional steps, such as installing protection modules, enabling XDR for Endpoints (EDR), and reporting to the assigned Endpoint Group Manager occur once the agent is able to connect with TrendAI Vision One™.

For other installation methods, see:

To install agents using the standard installer package, see Deploy agents using the installer package.
To install agents using a deployment script, see Deploy agents using the deployment script.

Note

clock_icon=4b003b65-3058-4609-b2e5-a7e5b7b57973.png

The installation process typically takes about five minutes to complete. Certain variables can affect the duration of the task, such as the specific OS version and distribution, package configuration, network connectivity, and endpoint hardware configuration.

refresh=5bd75452-c2fb-43ed-90e6-7b552fdc5dd2.png

Deployment typically does not require you to restart the endpoint to complete installation. Restarting the endpoint after installation can help with verifying system stability, but is not required.

Procedure

In the TrendAI Vision One™ console, go to Endpoint Security → Endpoint Inventory.
Click Agent Installer.
For Deployment method, select Offline package.

Select the Endpoint group you want to assign to the new agent.

Selecting the endpoint group in this step determines which protection features to install.

Selecting a group managed by Standard Endpoint Protection installs Standard Endpoint Protection features.
Selecting a group managed by Server & Workload Protection installs Server & Workload Protection features.
Selecting the group Default for sensor installs agents with only Endpoint Sensor features.

Important

Server & Workload Protection only provides support for the offline installer package for TrendAI Vision One™ Endpoint Security agent version 202603 and later.

Offline installer packages for Server & Workload Protection expire after 90 days.

Configure the operating system and initial policy settings.

Setting		Standard Endpoint Protection	Server & Workload Protection	Sensor only
Operating system		Setting is automatic based on the Endpoint group you select: Windows	Choose from: Windows Linux	Choose from: Windows Linux
OS version / Distribution	Windows	-	Select the specific Windows version for the installer.	-
OS version / Distribution	Linux	-	Select the specific Linux version for the installer.	Select the specific Linux version for the installer.
OS architecture	Windows	Choose from: 64-bit (x86-64 32-bit (x86) ARM64 (AArch64)	-	Choose from: 64-bit (x86-64 32-bit (x86) ARM64 (AArch64)
OS architecture	Linux	-	Choose from: 64-bit (x86-64 ARM64 (AArch64)	Choose from: 64-bit (x86-64 ARM64 (AArch64)
Initial policy	Group enrolled in Endpoint Security Policies	Use endpoint security policy assignment Agent applies the Base priority of the Endpoint Security policy assigned to the group.		-
Initial policy	Group not enrolled in Endpoint Security Policies	Select the Protection Manager policy to apply during installation, or select None		-
Relay group		-	Select the relay group to assign the endpoint to, or select None	-

Select the Agent installer proxy.

The agent installer proxy is used by the agent after installation completes to connect and register with TrendAI Vision One™. After connecting, the agent adopts the connection policy assigned to the endpoint group. Choose one of the options for the agent installer to connect with TrendAI Vision One™. The default selection is to use the Agent Installer Proxy Settings in Endpoint Inventory Global Settings.
- Use Agent Installer Proxy Settings: The installer package follows your configured Agent Installer Proxy Settings.
- Service Gateway name: Select a specific Service Gateway to act as the proxy. Only Service Gateways with the Forward Proxy service enabled appear on the list.
- Use the custom proxy specified in Agent Installer Proxy Settings: The installer package ignores all other configurations and only uses the custom proxy configured in Agent Installer Proxy Settings.
- System proxy: The installer uses the proxy settings of the endpoint system.
- Direct connect: The installer connects directly to TrendAI Vision One™ services.
Click the download icon () to download the installer package.
Run the installation package on your target endpoints with administration permissions.
- For Windows endpoints, run EndpointBasecamp.exe to install the agent.
- For Linux endpoints, open terminal and run the command # ./tmxbc install to install the agent.
The installation package installs the TrendAI Vision One™ Endpoint Security agent with the feature package based on the target endpoint group.

After installation successfully completes, the endpoint agent connects and registers to your TrendAI Vision One™ Endpoint Inventory if a network connection is available.

Comments (0)