This document is intended for LAN administrators and other technical support staff of the university

This software is available for use by students, faculty, and staff on university-owned computers.  This excludes computers purchased with professional development funds.

Management 

The software is "Enterprise" class software, and is designed to be centrally managed, through a web console.  IT Services will be providing such a console.

https://trend.its.sfu.ca:4343/officescan

Note: the certificate error is expected will be resolved shortly

All settings are changed/set (initially) from the console.

It is possible to manage an individual computer locally, but as a first step, the privilege allowing a person to do so must come down from the console.  (More later)

Initial Setup

First step is an email to  trend@sfu.ca  asking for console access to be set up.  This email will create an RT ticket.

In the email, please supply (if appropriate)  the name of a maillist to be used for notifications of AV events (infections, cleanings, etc.), or a list of users to receive such notices.  Please include the IDs of people who will be administering the console.  In most cases, these will be the same people but this list is required for a later step.

Upon receiving the request, IT Services will create a "container" in the Trend console, using the same naming convention as the Campus Active Directory  (BUS, FIN, etc.)

The use of Trend AV is in no way tied to Active Directory; Trend can be deployed to machines connected to a different domain or not connected to a domain at all.  It simply makes sense to employ a common naming convention.

Trend documentation refers to these containers as "domains" but all SFU documentation will refer to them as containers.

IT Services will then create user accounts allowed access to the console, based upon the list of IDs specified above.  These users will access the console with Active Directory credentials but this is the only way in which Active Directory is involved; authentication for console access.

Next, a new "role" will be created, that of "container admin", as in FIN Admin or BUS Admin.  The role will be given full access to the container and will be allowed to configure just about every single setting or permission possible.

The new users will then be added to the new role and console configuration is now complete.

Next, the user(s) will be added to the trend-admins maillist.  This list is used to restrict downloads and may also be used to actually send emails!

Finally, IT Services will create an email filter such that any AV alert message from machines in the container will be forwarded to the members of the maillist requested in step one.

(The Trend console seems able to only send messages globally, no matter what the container.  Thankfully, the messages include the container, so we will will use Connect filters to redirect them)

Installation - Windows

The Trend AV Windows installer will remove McAfee automatically, though it is not advisable to rely upon this method.  Rather, it is recommended to remove McAfee using "Add/Remove programs", removing the software first, then the agent.

The McAfee Framework may be left behind in some rare cases.  If NET START (run at a CMD prompt) shows McAfee Framework Service as running, it should be manually removed.  CD to the McAfee directory in Program Files and run the following command:

FRMINST.exe /Forceuninstall

While not absolutely necessary, it is advisable to reboot after removing McAfee.

Next step, once all existing AV has been removed, is to install the Trend Client.  This is easy; double-click theinstaller (downloadable below).  The installer will

1. Create a TREND directory on C:  (C:\TREND)
2. Extract three files to C:\Trend
   • SFU_Trend.cmd
   • PortQRY.exe
   • Trend.MSI
3. CD to C:\Trend
4. Run the SFU_Trend script

The SFU_Trend script will

1. Use the MS tool PortQry to check connectivity between the workstation and the Trend console server.  The workstation must be able to communicate over port 8080.
2. Check to see if a server container has been specified and if not, ask for one
   
3. Uninstall Windows Defender and McAfee version 8.7 and 8.8
   • other versions of McAfee and other AV programs must be removed manually
4. Install Trend, creating a log file in C:\Trend
5. Read the log file, looking for signs of success

Note: The script as written is not suitable for a "silent" install, as it will pause of anything amiss is discovered.  Please email TRENDsfu.ca for assistance with such a script.

Uninstallation - Windows

This documentation has been moved to a separate page. See Uninstalling Trend Micro (Windows).

Installation - Mac

The removal actions of the Mac installer are unknown at this time.  Please report any behavior to trend@sfu.ca.

Post Installation 

Windows

A container will have been created for you and machines will appear in that container because you followed the instructions above.

However, you may wish to sort machines into sub containers (Servers, Notebooks, Unmanaged and so on). 

This is NO LONGER doable. 

Problems in the past have convinced us sub containers are a bad idea. 

Don't do it, no sub containers!

Instead, submit a request to TREND@sfu.ca for another container (or two or three, as required).  We'll attempt to get them created quickly.

One thing to note here; the nature of the email notifier is such that all containers must begin with the same prefix.  So for Finance, the first container would be named

FIN

while the rest of the containers would have names like

FIN_Servers
FIN_Workstations
FIN_Notebooks

and so on.  Once the containers have been created, the installer above can be used to place the machines immediately into the correct container at install time.  Machines can of course be moved around using the GUI as well after the fact.

There is a default group of settings bundled into the installer and those settings are, by and large, perfectly reasonable meaning that Trend may well be set and forget.  But there could also be unusual pieces of software, specific to an area, that Trend sees as "suspicious".  These will need to be added to the "OK" list for the container.

Mac

Mac computers appear in a single container and sadly, there is currently no way to federate administration.  The Mac support staff in IT Services will look after configuration centrally.  Details of this service are still being finalized.

Unmanaged Machines

We all have some unmanageable users who will insist upon doing things themselves, and this is possible with Trend.  When running the installer downloadable below, specify

Unmanaged

as the container.  This has been configured with settings that allow a user to control all aspects of the AV client.  No central notifications will be sent, nothing.  This is truly a "leave me alone" container. The password to unload or uninstall trend in this container is "abcdef" (no quotes).

For those users who are unmanageable but will still come to you when they mess it up, you may wish to create an unmanged container, allowing the user access to many of the settings, just not all of them. Just be sure to name the container properly so you still get messages of their indiscretions, as in 

FIN_Unmanaged

Downloads

Download access to Trend Micro is available upon request and approval. Please send your request to TREND@sfu.ca with the name of your department.

Windows

OS / System Requirements

• Windows XP 32-bit: Professional and Home, SP3
• Windows XP 64-bit: Professional, SP2
• Windows Vista™  32- and 64-bit: Business, Enterprise, Ultimate, Home Premium, Home Basic, all SP2 or later
• Windows 7 32- and 64-bit : Home Basic, Home Premium, Ultimate, Professional, Enterprise

For complete details, see the Trend System Requirements page.

Download

Windows Installer (32-bit and 64-bit) (Version: 10.5.1997, Update: Dec. 19, 2011)

IpXfer Utility

Mac

OS / System Requirements

OS X 10.4 or greater

Note:

1. Java for OS X is a prerequisite for OS X 10.7+ installs
2. For OS X 10.8: Change the security settings in [System Preferences - Security & Privacy - General - "Allow applications downloaded from:" to Anywhere] before proceeding with the installation
   

Download

Mac Installer (Update: October 4, 2012)

Mac Uninstaller (Update: October 4, 2012)

Trend Documentation

General

Windows

Mac