Deploying the Agent Installer to Virtual Desktops

Deploy persistent and non-persistent virtual desktops in a VDI environment.

Important:
  • To use this feature, you must first complete the Initial Setup wizard on the Endpoint Groups tab.

  • Virtual desktop support requires a VMware or Microsoft hypervisor environment.

Tip:

We support multi-session VDI solutions. We do not change or limit the functionality of your virtual desktop operating systems. Our VDI solution works by creating unique device IDs for each virtual desktop after provisioning.

Table 1. Feature Support

Feature

Persistent

Non-persistent

Agent upgrade (in-place)

Supported

Not supported

Agent upgrade (template)

Supported

Supported

Important:

You must use a snapshot of your template from before you ran ImageSetupTool.exe.

Vulnerability Detection

Supported

Not supported

Zero Trust Secure Access

Supported on provisioned desktops

Supported on provisioned desktops

Important:

The image setup tool does not support enabling Zero Trust Secure Access on the base image template. To enable Zero Trust Secure Access on virtual desktops, deploy after newly-provisioned machines appear on the Inventory List on the console.

Table 2. Tested Environments

Provider

Supported Platforms

VMware

  • VMware Horizon 8.3

Microsoft

  • Azure Virtual Desktop

  • Windows 365

  1. Configure your virtual desktop template, including operating system, VM settings, and software.
  2. Configure all software for a VDI environment, including endpoint protection software.
    Important:

    For Apex One customers, run the template generation tool before exporting.

  3. Download and install the agent program on the virtual desktop by going to the Endpoint Inventory app and clicking on the Agent Installer tab.
  4. (Optional) Remove non-persistent agents by configuring inactive agent removal in the Endpoint List.
  5. Verify that your virtual desktop appears on the Endpoint List tab in the Endpoint Inventory app, and ensure that the correct features are enabled.
  6. (Optional) Create a snapshot of your virtual desktop to facilitate future agent upgrades. For more information, see Updating the Agent on Virtual Desktops.
  7. Download ImageSetupTool.exe from Trend Micro Vision One and copy the admin token from the Agent Installer tab on the Endpoint Inventory app.
    Note:

    The image setup tool is specific to your organization.

  8. Run ImageSetupTool.exe as an administrator on the virtual desktop to prepare the agent to run in a VDI environment.
    Important:

    Specify if your virtual machine is persistent or non-persistent.

    Command

    Use Case

    Supported Features

    ImageSetupTool.exe --persistent

    Persistent virtual desktops

    • Standard agent auto-removal
    • Vulnerability detection available
    • In-place upgrades

    ImageSetupTool.exe --non-persistent

    Non-persistent virtual desktops

    • Non-persistent agent auto-removal available from Endpoint Inventory
    • Vulnerability detection disabled
    • In-place upgrades disabled
  9. Paste the admin token copied from the Endpoint Inventory app when prompted.
  10. Delete the image setup tool from the virtual desktop once image setup completes.
  11. Export your virtual desktop template.

    Ensure that endpoint groups are configured to accommodate virtual desktops. For more information on endpoint grouping, see Managing Endpoint Groups.

  12. Sign in to virtual desktops to see the newly-provisioned endpoints appear on the Endpoint List in the Endpoint Inventory app.