If you upgrade from a 1.x version of Endpoint Application Control to 2.0 or later, the newer version attempts to help you import your old data.


If you encounter problems importing your old data, contact Trend Micro Technical Support.

See Contacting Trend Micro.

To reduce the risk of data loss, Trend Micro recommends using the following upgrade flow:

  1. Back up your server and agent data.

    See Backing up your Server.

    After starting your back up, Trend Micro recommends not using your Endpoint Application Control server again until you complete your upgrade.

  2. Optionally, migrate your old data to a new server endpoint. Do the following:

    1. Install the older version of Endpoint Application Control server on the new server endpoint.

    2. Restore your old data to the new server endpoint.

      See Restoring your Server and Agents.

  3. Upgrade the Endpoint Application Control server using the Windows installation wizard.

    See Server Installation.

    During server installation, the Windows installation wizard attempts to import policies, rules, and settings from the older version.

  4. Log on the web console to automatically import policy action logs from the older server version.


    Importing policy action logs can take a substantial amount of time.

  5. To upgrade agents that were originally deployed using OfficeScan Plug-in Manager, follow the steps outlined in the following Knowledge Base article:

    Manually update the Endpoint Application Control (EAC) 2.0 Agent Deployment Tool in the OSCE Plug-in Manager to Service Pack 1 - Patch 1 Build 1550

  6. To upgrade agents that were originally installed using any method other than the OfficeScan plug-in, follow the steps below.

    1. To upgrade agents of version 1.x to 2.0 or later, first uninstall them and then deploy new agents. Specify any new server information during agent installation.

      See Agent Uninstallation.

      See About Agent Uninstallation and Agent Deployment.

    2. To upgrade agents of version 2.0 or a later version to a newer version, use one of the following commands depending on your installer type.

      For an MSI installer package, type the command in this format:

      msiexec /i <installer name> reinstall="all" reinstallmode=vomus ServerHost=<http://serverIP_or_hostname:port or https://serverIP_or_hostname:ssl_port> /norestart /qn /l*v C:\temp\<installer name>.log

      For example, type in msiexec /i AcAgentSetup_x64.msi reinstall="all" reinstallmode=vomus ServerHost= /norestart /qn /l*v C:\temp\AcAgentSetup_x64.msi.log.

      For an EXE installer package, type in the command in this format:

      <installer name> ServerHost=<http://serverIP or hostname:port or https://serverIP or hostname:ssl port>

      For example, type in AcAgentSetup_x86.exe ServerHost=

    The agents begin exchanging endpoint inventories, applied policies, and similar data with the newly upgraded server.

  7. Monitor agents on the Users and Endpoints screen.

    See Users and Endpoints Screen.