Trend Micro (Anti-Malware)get help

Update: February 07, 2020

This document is intended for LAN Administrators and other university technical support staff.


This software is available for use by students, faculty, and staff on university-owned computers.  This excludes computers purchased with professional development funds.


Trend Micro OfficeScan is an "enterprise" class software and clients deployed on individual desktops are designed to be managed cnetrally through a web console. Access to the console is reserved for LAN Administrators only. All settings are changed/set from the console.

In the past, accessing the console requires Internet Explorer (IE). This is no longer the case starting with Trend Micro OfficeScan 11. You can use any of the major browsers (e.g. Chrome, Firefox, Safari) for this task.

To access the console (on campus only), login to

Initial Setup

First step is an email to asking for console access to be set up.  This email will create an service ticket.

In the email, please supply (if appropriate)  the name of a maillist to be used for notifications of anti-malware events (infections, cleanings, etc.), or a list of users to receive such notices.  Please also include the IDs of people who will be administering the console.

Upon receiving the request, IT Services will create a "container" in the Trend console, using the same naming convention as the Campus Active Directory  (BUS, FIN, etc.)

Note: The use of Trend AV is in no way tied to Campus Active Directory; Trend can be deployed to machines connected to a different domain or not connected to a domain at all.  It simply makes sense to employ a common naming convention.

Trend documentation refers to these containers as "domains" but all SFU documentation will refer to them as "containers".  

IT Services will then create user accounts allowed access to the console, based upon the list of IDs specified above.  These users will access the console with Campus Active Directory credentials.

Next, a new "role" will be created, that of "container admin", as in FIN Admin or BUS Admin.  The role will be given full access to the container and will be allowed to configure just about every single setting or permission possible.

The new users will then be added to the new role and console configuration is now complete.

Finally, the user(s) will be added to the trend-admins maillist.  This list is used to restrict downloads and may also be used to deliver important information about Trend Micro OfficeScan from IT Services.


For the most part, these instructions are applicable for both individual installs or large scale deployments. However, for large scale deployments, you may need to adept the instructions to suite your centralized deployment systems.

If you have users who do not wish Trend Micro OfficeScan to be managed whatsoever, please take a look at the Unmanaged Machines section.



Managed or Semi-Managed Machines

We recommend that you remove all existing anti-malware software from your computer(s) first before continuing with this Trend Micro OfficeScan installation.

To install Trend Micro OfficeScan client, double-click the MIS installer (downloadable below) and follow the on-screen instructions. By the end of the installation, you will likely have to restart your computer.

You can find the computer object in a container on the Trend Micro OfficeScan server based on the MSI you have downloaded.

Unmanaged Machines

We all have some unmanageable users who will insist upon doing things themselves, and this is possible with Trend. When downloading the installer below, look for the Unmanaged MSI.

This has been configured with settings that allow a user to control all aspects of the anti-malware client.  No central notifications will be sent, nothing.  This is truly a "leave me alone" container. The password to unload or uninstall trend in this container is "abcdef" (no quotes).


It is recommended that you remove all existing anti-malware software first before installing Trend Micro Security for Mac.

To install Trend Micro Security for Mac, download the Mac installer first. Once you have downloaded and uncompressed the file, double-click the PKG installer. You can then follow the on-screen instructions to finish the installation.

macOS 10.13 (aka High Sierra) requires a reboot after the installation has been completed. It also will ask for your permissions to access the whole hard drive. You will need to complete both requirements in order for the Trend Micro Security for Mac agent to function properly.

Given Trend Micro Security for Mac has been designed differently from its Windows counterpart, Unmanaged container is not possible.

Post Installation


A container will have been created for you and machines will appear in that container because you followed the instructions above.

Submit a request to for additional containers if different OfficeScan settings are needed for a group of machines (e.g. Server or Research).  We'll attempt to get them created quickly.

One thing to note here; the nature of the email notifier is such that all containers must begin with the same prefix.  So for Finance, the first container would be named


while the rest of the containers would have names like


and so on. Machines can of course be moved around using the GUI as well after the fact.

There is a default group of settings bundled into the installer and those settings are, by and large, perfectly reasonable meaning that Trend may well be set and forget.  But there could also be unusual pieces of software, specific to an area, that Trend sees as "suspicious".  These will need to be added to the "OK" list for the container.


Mac computers appear in a single container and sadly, there is currently no way to federate administration.  The Mac support staff in IT Services will look after configuration centrally.


There are two ways to migrate an existing endpoint to a new Trend Micro OfficeScan server. They will be discussed below.

Method 1

  1. Login to Trend Micro OfficeScan server console where the endpoint currently resides.
  2. Under Agents - Agent Management (or Networked Computers - Client Management), find the endpoint object
  3. Click on the object to highlight it
  4. Under Manage Agent Client Tree (or Manage Client Tree) - Move Agent (or Move Client)
  5. Select "Move selected agent(s) to another OfficeScan server" (or "Move selected client(s) to another OfficeScan server")
  6. Type in the new server name in "OfficeScan Server name or IP Address" (or "OfficeScan server"). For example,
  7. Type in 8080 for "Port" (or "HTTP port number")

Alternatively, you can do everything describe above via a command line using the IPXfer tool. This allows you to script the command to handle     batch migration. The tool can be downloaded below. For more information on how to use the command, please refer to Trend Micro's support document here.

Method 2

Standard Microsoft Windows program install and uninstall

  1. Uninstall the old Trend Micro OfficeScan from an endpoint
  2. You will be prompted for the uninsntall password. (note: we have set a default password but you may have changed it for your container. In such case, your password needs to be used)
  3. Restart may be required
  4. Install the new Trend Micro OfficeScan that you have downloaded from below



Download access to Trend Micro OfficeScan is restricted based on the information provided in the initial setup section. If you have not done so already and require access, please send your requests to with the name of your department.


OS / System Requirements:

  • Windows 8/8.1 32- and 64-bit
  • Windows 10 32- and 64-bit
  • Windows Server 2012 32- and 64-bit
  • Windows Server 2016 32- and 64-bit

For complete details, see the Trend System Requirements page.

Windows Installer (Update: March 20, 2020). List of SHA256 checksum


IpXfer Utility (Update: February 7, 2020)

  • Command line utility to migrate an anti-malware agent from one server console to another
  • SHA256 checksum:


OS / System Requirements

  • OS X 10.9.5 or higher


1. For macOS 10.13+: If you see a "System Extension Blocked" message, please follow the on-screen instruction to "Allow" the System Extension for Trend Micro (Mac)

2. For macOS 10.14+: Follow the on-screen instructions to provide full access to your disk/hard drive to the Trend Micro (Mac) agent


Mac Installer (Update: January 21, 2020)

SHA256: 9d82b9bb65fcf21b3836c047c8ad8414f53bb29083ede4d727966fa29e5423af

Mac Uninstaller (Update: January 21, 2020)

SHA256 checksum: 8beedecb91523ebaf32fa827de4dff50beea5ace4c83656538200952e3612407

Trend Documentation

Many Trend Micro OfficeScan documentation can be found on the vendor's support page.


Q: What is the default password set on the console to uninstall/unload the Trend Micro OfficeScan client?

A: Please email for this information.

Q: I am unable to uninstall Trend Micro OfficeScan even after I have entered the password. What do I do now?

A: There are a few things you can try:

  1. Push the password out again via the OfficeScan management console. This should re-establish the endpoint uninstall/unload password.
  2. Uninstall OfficeScan manually using Trend Micro OfficeScan knowledge base article: