Prepare an installer for use with a custom download source

Views:

Configure and download the agent installer package for use with deployment scripts

Important

Deployment scripts do not support installing agents with Standard Endpoint Protection features.

If you want the deployment script to download from a custom location, you must first create and download an agent installer package. Utilizing a custom location allows you to control the agent version that is installed on your endpoints. When using this method, please keep in mind the following:

Trend Micro recommends keeping the agent installer package up to date to ensure components and detection models are able to protect against the latest threats.
The agent installer proxy settings configured for the agent installer package are used regardless of the custom script configuration.

Configuration and download of the agent package is similar to downloading the installer package as normal, without the steps to unpack and install. The deployment script handles the installation steps.

Procedure

Go to Endpoint Security → Endpoint Inventory.
Click Agent Installer.
Under the package type you want to configure, select your Operating system.

Important

Deployment scripts do not support installing Standard Endpoint Protection.
- Windows
- Linux
- macOS (only for Endpoint Sensor deployments)

Specify the package type.

This step applies to Server & Workload Protection features for Linux and Windows, and Endpoint Sensor features for Linux.

Note

If you want to use the custom download location to manage bandwidth or to control the agent version installed on your endpoints, select Full package. The auto detect package is designed to connect to Trend Micro services and download the latest agent and component versions.

Auto detect: The installation package is light-weight, and downloads and installs additional components after detecting the operating system type (requires more network bandwidth)
Full package: The installation package contains all necessary components and automatically installs the correct components after detecting the operating system version

If you choose Full package you must also choose the OS version for Windows, or Distribution for Linux.

Select the OS architecture.

Server & Workload Protection only requires this step for Linux deployments. Endpoint Sensor requires this step for both Windows and Linux deployments.
For Server & Workload Protection deployments, select the Protection Manager that the newly-deployed agents report to.

Select the Agent installer proxy.

Important

Verify that the proxy is available and the endpoint can connect. If the proxy is unavailable or the endpoint cannot establish a connection, the installer package will fail to download necessary components from Trend Vision One.

To use a Service Gateway as a proxy, the deployed Service Gateway must have the Forward Proxy Service enabled. For more information, see Manage services in Service Gateway.

You can choose from one of the following options:

Select Use Agent Installer Proxy Settings to follow the settings configured in your Agent Installer Proxy Settings.
Select a deployed Service Gateway to force the installer to only use that Service Gateway.
Select Use the custom proxy specified in Agent Installer Proxy Settings to use only the custom proxy you specified in Agent Installer Proxy Settings.
Select System proxy to use the proxy settings defined in the system settings of the endpoint.
Select Direct connect to allow the installer to connect directly to Trend Vision One.

Click the Download installer icon ().
Upload the archived agent installer package to a location your endpoints can access.

Save the full URL location of the package, including the archive file extension.

An example URL might look like: https://sample.fileserver.us-east-1.amazonaws.com/TMSensorAgent_Windows.zip