Views:

Prepare your Linux endpoints to allow the Trend Vision One Endpoint Security agent to run within the UEFI Secure Boot environment.

Some versions of Server & Workload Protection for Linux are compatible with Unified Extensible Firmware Interface (UEFI) Secure Boot. When Secure Boot is enabled, the Linux kernel checks the PKI signature of each kernel module before loading. The kernel does not load unsigned kernel modules, nor modules with invalid signatures. These agent features install the following kernel modules:
  • Anti-Malware
  • Web Reputation
  • Firewall
  • Integrity Monitoring
  • Intrusion Prevention
  • Application Control
To use these features with Secure Boot, you must enroll the public keys from Trend Micro in the endpoint firmware so the operating system can validate the kernel module signatures. Review the following topics to download the public keys and register them with your Linux endpoints:
Related information