OSCE10 Manual Update Process 090917

14
Securing Your Web World A Trend Micro TrendEdge Solution Advanced Technologies and Techniques to Enhance Your Product Paul Hsu Staff Engineer Technical Sales Solutions Trend Micro, Inc. TREND MICRO INC. 10101 N. De Anza Blvd. Cupertino, CA, 95014 www.trendmicro.com Toll free: +1 800.228.5651 Fax: +1 408.257.2003 Phone: +1 408.257.1500 Trend Micro OfficeScan 10 Manual Component Update Process September 2009

Transcript of OSCE10 Manual Update Process 090917

Page 1: OSCE10 Manual Update Process 090917

Securing Your Web World

MESSAGING SECURITY | SOFTWARE | DATASHEET

A Trend Micro TrendEdge SolutionAdvanced Technologies and Techniques to Enhance Your Product

Paul HsuStaff EngineerTechnical Sales SolutionsTrend Micro, Inc.

TREND MICRO INC.

10101 N. De Anza Blvd. Cupertino, CA, 95014 • www.trendmicro.com

• Toll free: +1 800.228.5651 • Fax: +1 408.257.2003 • Phone: +1 408.257.1500

Trend Micro OfficeScan 10 Manual Component Update Process

September 2009

Page 2: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

i A Trend Micro TrendEdge Solution

Contents Objective............................................................................................................................................1 Scenarios ...........................................................................................................................................1

Scenario 1: Manually Updating the OfficeScan 10 Scan Engine ........................................................1 Scenario 2: Manually Updating OfficeScan 10 Pattern Files on the OfficeScan Server .......................5 Scenario 3: Updating OfficeScan 10 Components Using Other Internal Sources ................................7

Method A. Configuring OfficeScan 10 to Obtain Updates from Another Server .............................7 Method B. Using a Trend Micro Control Manager (TMCM) Server as an Update Source ...............7

Scenario 4: Manually Updating OfficeScan 10 Activation Codes ........................................................9 About the Author .............................................................................................................................. 10

Paul Hsu ...................................................................................................................................... 10 About Trend Micro Incorporated ........................................................................................................ 11 Contacting Technical Sales Solutions ................................................................................................ 12

Trend Micro, the Trend Micro t-ball logo, Control Manager, and OfficeScan are trademarks or registered trademarks of Trend Micro, Incorporated. All other product or company names may be trademarks or registered trademarks of their owners. Trend Micro Incorporated reserves the right to make changes to this document and to the product described herein without notice, and the information contained in this document is provided “as-is”. This document is for informational purposes only, and is not supported by Trend Micro or its partners. TREND MICRO MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. Copyright© 2009 Trend Micro Incorporated. All rights reserved. Document Part No. TE01OSCE10_090917US

Page 3: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

1 A Trend Micro TrendEdge Solution

O bjec tive This document is designed to help OfficeScan 10 customers that have an Internet connection problem or have no Internet connection manually deploy OfficeScan 10 components to their corporate servers.

This document describes manual processes for:

• Updating the Trend Micro scan engine

• Deploying OfficeScan 10 pattern files

Additionally, this document provides two alternate ways of deploying these components.

S c enarios

S c ena rio 1: Manually Upda ting the O ffic eS c an 10 S c a n E ngine If the OfficeScan 10 server does not have an Internet connection, you should update the scan engine manually when a new version is available.

You can use the following steps to update the server’s copy of the OfficeScan 10 Scan Engine:

1. Download the latest Trend Micro Scan Engine from http://www.trendmicro.com/ download/engine.asp.

2. Copy the Trend Micro scan engine to a portable device such as a USB stick or hard drive. The following steps use the VSAPI-KD-8.950-1092.zip version of the OfficeScan 10 Windows scan engine as an example.

3. Rename the ZIP file (VSAPI-KD-8.950-1092.ZIP) to "tmengNT.zip".

4. Extract the contents of the tmengNT.zip file and place them in the \PCCSRV\pccnt\drv folder on the OfficeScan 10 server.

5. Copy the tmengNT.zip file to the \PCCSRV\Download folder.

Page 4: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

2 A Trend Micro TrendEdge Solution

F igure 1 Location of the Zipped Scan Engine Files

6. Copy the tmengNT.zip file to the \PCCSRV\Download\engine folder and change the name

of the tmengNT.zip file to "eng_ntkd.zip".

F igure 2 Location of the Renamed Zipped Scan Engine Files

7. Check the properties of the eng_ntkd.zip file then note its file size in bytes.

8. Open the server.ini file in the \PCCSRV\Download\ folder.

Page 5: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

3 A Trend Micro TrendEdge Solution

9. In the [ENGINE] section, set the default values for the variable names in Table 1 to the indicated parameters. When you are finished, the [ENGINE] values should be identical to those in Figure 3.

T a ble 1 Scan [ENGINE] Variables and Version Information that must be Modified During Manual

Updates

Variable Name Scan Engine Version Information

Path_VSAPI32_NT_KD engine/eng_ntkd.zip, 8.950, 891442

E.10 VSAPI32_NT_KD,engine/eng_ntkd.zip, 8.950.1092, 891442

Note: 8.950 is the scan engine version, 1092 is the build number, and 891442 is the file size in bytes.

F igure 3 Example Updated List of Scan [Engine] Variables and Version Information

10. Save and close the file.

11. Use a text editor to open the ofcscan.ini file in the \PCCSRV\ folder.

12. In the [INI_PROGRAM_VERSION_SECTION] section, set the default value for the change the "EngineNT_Version" variable to the new scan engine version and the build number in Table 2. When you are finished, the value for this variable should be identical to that in Figure 4

T a ble 2 Windows Program Information that must be Modified During Manual Updates

Variable Name Scan Engine Version Information

EngineNT_Version .950.1092

Note: .950 is the scan engine version, and 1092 is the build number.

Page 6: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

4 A Trend Micro TrendEdge Solution

F igure 4 Example Updated List of Windows Program Information

13. Save and Close the file.

You also can use the above steps with other Trend Micro OfficeScan 10 Scan Engines.

Use Tables 3 through 5 below along with the steps in Scenario 1 above as guides for updating each OfficeScan 10 scan engine parameter and file name.

T a ble 3 List of different scan engines

Downloaded File Name Rename To Rename To ofcscan.ini

VSAPI-KD-x.xxx-yyyy.ZIP tmengNT.zip eng_ntkd.zip EngineNT_Version

VSAPI-KD-AMD64-x.xxx-yyyy.ZIP tmengx64.zip engv_amd64_ntkd.zip EngineX64_Version

VSAPI-KD-IA64-x.xxx-yyyy.ZIP tmnewpx64.zip engv_ia64_ntkd.zip EngineIA64_Version

Note: x.xxx is the scan engine version, and yyyy is the build number.

Extract the downloaded zip file contents to following folder:

T a ble 4 Locations for the different scan engines

Downloaded File Name Rename To Folder Path for Exact Components

VSAPI-KD-x.xxx-yyyy.ZIP tmengNT.zip \PCCSRV\PCCNT\DRV

VSAPI-KD-AMD64-x.xxx-yyyy.ZIP tmengx64.zip \PCCSRV\PCCNT\DRV\X64

VSAPI-KD-IA64-x.xxx-yyyy.ZIP tmnewpx64.zip \PCCSRV\PCCNT\DRV\IA64

Table of OfficeScan 10 Scan Engines for different platforms:

T a ble 5 Scan engines for different Operation systems

File Name Platform support

VSAPI-KD-x.xxx-yyyy.ZIP Windows

VSAPI-KD-AMD64-x.xxx-yyyy.ZIP Windows 2000/ XP/ Vista for x64

VSAPI-KD-IA64-x.xxx-yyyy.ZIP Windows 2000/ XP for Itanium

Page 7: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

5 A Trend Micro TrendEdge Solution

S c ena rio 2: Manually Upda ting O ffic eS c a n 10 P a ttern F iles on the O ffic eS c a n S erver

Use the following steps to perform manual updates of Trend Micro pattern files, for either an Official Pattern Release or a Controlled Pattern Release, in OfficeScan 10.

Please do the following:

1. Download the desired Trend Micro pattern files from http://www.trendmicro.com/download/ pattern.asp#01.

2. Copy the Trend Micro pattern files to the portable device.

3. Extract the pattern file (for example, lpt$vpn.xxx) to the \PCCSRV folder on the OfficeScan 10 server. (Note: xxx = pattern file version.)

F igure 5 OfficeScan 10 Pattern Files

4. Wait for 2 to 5 minutes. Verify that you have updated the OfficeScan 10 server by logging on to

the OfficeScan 10 management console, navigating to the Summary page, and checking the current version number.

You can use the above steps to deploy other Trend Micro pattern files, as long as you copy them to the appropriate directory. See Table 6 below for the complete list of all OfficeScan 10 pattern files and the directories where they “live.”

Page 8: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

6 A Trend Micro TrendEdge Solution

T a ble 6 Name, Location and Descriptions of all OfficeScan 10 Pattern Files

Name File Path Description

lpt$vpn.xxx \PCCSRV Virus Pattern File

ssaptn.xxx \PCCSRV Spyware Active-Monitoring Pattern (Real-time)

ssapiptn.da5 \PCCSRV Spyware Pattern File (Detection and Cleanup)

ssapiptn.da6 \PCCSRV Spyware Pattern File (Detection and Cleanup)

tmwhite.xxx \PCCSRV IntelliTrap Exception Pattern

tmblack.xxx \PCCSRV IntelliTrap Pattern

tsc.ptn \PCCSRV\ADMIN Virus Damage Cleanup Template

tsc.exe \PCCSRV\ADMIN Virus Damage Cleanup Engine

Page 9: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

7 A Trend Micro TrendEdge Solution

S c ena rio 3: Upda ting O ffic eS c a n 10 C omponents Us ing O ther Internal S ourc es If one of your OfficeScan 10 servers cannot access the Internet directly to access a Trend Micro ActiveUpdate server, you can update the OfficeScan 10 components manually using another source. Some possible sources of update include:

• A portable device

• Another OfficeScan 10 server

• Trend Micro Control Manager

The latter two options are good choices because you can choose servers that can connect to the Trend Micro ActiveUpdate server. The methods below describe how to use them to update your OfficeScan 10 components.

Method A. C onfiguring Offic eS c an 10 to O btain Updates from Another S erver

To configure OfficeScan 10 to obtain pattern files and other components from another OfficeScan 10 server, do the following:

1. Logon to the management console of the OfficeScan 10 server that you want to update.

2. Click Updates > Server > Update Source

3. Select Other update source then type the following in the window.

http://<name or IP address of the server with the newest components>:<server port>/officescan/download

4. Click Save.

Steps for updating the OfficeScan 10 server manually:

5. Click Updates > Server > Manual Update or click Update Sever Now on the management console’s main menu.

6. Select the components to update.

7. Click Update. The OfficeScan 10 server will download the selected components.

8. Verify if the server finished download updates.

Method B . Us ing a T rend Mic ro C ontrol Manager (T MC M) S erver as an Update S ourc e

To configure OfficeScan 10 to download pattern files and other components automatically from a Trend Micro Control Manager server, do the following:

1. Logon to the OfficeScan 10 management console you want to update.

2. Click Updates > Server > Update Source

3. Select Other update source then type the following in the window.

http://server name, FQDN or IP address of the TMCM server/tvcsdownload/activeupdate

4. Click Save. Select the components to update.

Page 10: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

8 A Trend Micro TrendEdge Solution

5. Click Update. The OfficeScan 10 server will download the selected components.

6. Verify that the server finished downloading the updates.

To perform a manual update of OfficeScan 10 components using a Trend Micro Control Manager server as the update source do the following:

1. Logon to the OfficeScan 10 management console you want to update.

2. Click Updates > Server > Manual Update or click Update Server Now on the management console’s main menu.

3. Select the components to update.

4. Click Update. The OfficeScan 10 server will download the selected components.

5. Verify that the server finished downloading the updates.

Page 11: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

9 A Trend Micro TrendEdge Solution

S c ena rio 4: Manually Upda ting O ffic eS c a n 10 A c tiva tion C odes When a full or evaluation version of OfficeScan 10 is about to expire or if you want to enable a new OfficeScan 10 feature, you may need to enter one or more new activation codes. To enter a new code, do the following:

1. Acquire the necessary activation code or codes from your Trend Micro Sales Representative or through the Trend Micro Online Registration Site.

2. Logon to the management console of the OfficeScan 10 server you wish to activate.

3. Click Administration > Product License. The Product License screen appears.

4. If you have an activation code, enter it in the New Activation Code field.

5. Click Save.

F igure 6 OfficeScan 10 Product License Page

Page 12: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

10 A Trend Micro TrendEdge Solution

A bout the Author

P a ul Hs u Paul has been with Trend Micro for over five years and is currently a Trend Micro Technical Sales Solutions Staff Engineer. Prior to his current role, he worked in presales and as a field engineer for Acer, Inc. Taiwan. Additionally, he has over 6 years of experience in network security and system administration.

Page 13: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

11 A Trend Micro TrendEdge Solution

A bout T rend Mic ro Inc orporated Trend Micro Incorporated, a global leader in Internet content security, focuses on securing the exchange of digital information for businesses and consumers. A pioneer and industry vanguard, Trend Micro is advancing integrated threat management technology to protect operational continuity, personal information, and property from malware, spam, data leaks and the newest Web threats. Its flexible solutions, available in multiple form factors, are supported 24/7 by threat intelligence experts around the globe.

Founded in 1988, Trend Micro provides individuals and organizations of all sizes with award-winning security software, hardware, and services. With headquarters in Tokyo and operations in more than 30 countries, Trend Micro solutions are sold through corporate and value-added resellers and service providers worldwide. For additional information and evaluation copies of Trend Micro products and services, visit our Web site at http://www.trendmicro.com/.

Page 14: OSCE10 Manual Update Process 090917

Trend Micro OfficeScan 10 Manual Component Update Process

12 A Trend Micro TrendEdge Solution

Contacting Technical Sales Solutions The Trend Micro Technical Sales Solutions team is always seeking to provide better products. Have a question or comment about this document? We would like to hear from you. Contact us at: [email protected]