Enabling remote or roaming Client Server Messaging Security for SMB (CSM) 3.x clients to update from the Trend Micro ActiveUpdate server

 

Solution ID: 127604
Product: Client Server Messaging Security for SMB - 3.0, Client Server Messaging Security for SMB - 3.5, Client Server Messaging Security for SMB - 3.6

Operating System: Windows 2000 Server, Windows XP

Published: 10/24/07 7:46 PM

Problem:
Set roaming mode
VPN clients' updates
Roaming clients updates
Mobile clients
Remote Security Agents lacking the required privileges cannot get updates from the Security Server.
You would like remote Security Agents to get updates automatically from the Internet (ActiveUpdate server) without having to uninstall and reinstall the agents with the client package.

Environment:
Client Server Messaging Security for SMB 3.0, 3.5, 3.6
Windows XP / 2000

Solution:
Do one of the following to fix the issue:

Option I: Enable ActiveUpdate server updates through the Security Dashboard
1. Open the Security Dashboard and then click the Security Settings tab
2. Choose the domain or group of the remote/roaming clients and then click Configure.
3. Go to Desktop privileges and then specify the following information:
    Antivirus: Enable Roaming Mode
    Update Privileges: Perform Update Now
    Update Settings: Download from the Trend Micro ActiveUpdate Server and Enable Scheduled Update
4. Go to Updates and then select the Scheduled option.
5. Click the Schedule tab and then specify the update schedule.
6. Instruct the users of the client machines to right-click the CSM icon and then click Enable Roaming Mode.

Option II: Create a new group for the clients that need to be set in roaming mode.
1. Log on to the Security Dashboard.
2. Go to the Security Settings tab and create a new group for the clients that need to be set in roaming mode.
3. Drag and drop the PCs that you want to set as roaming clients into the new group you just created.
4. Highlight the new group and click on Configure.
5. Go to the "Client Privileges" section.
6. Select the Enable Roaming option.

Additionally, it is recommended to set those PCs to get updates directly from the ActiveUpdate server on the internet whenever they are not connected to the network, in order to have them constantly updated.
To do this, on the same Security Dashboard screen, select the Download from Trend Micro ActiveUpdate Server option under "Update Settings".

Option III: Enable ActiveUpdate server updates through the registry key of each machine
1. Open the Registry Editor (regedit.exe).
Important: Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this     ccur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.
2. Go to the HKEY_LOCAL_MACHINE\Software\trend micro\pccillinNTCorp\CurrentVersion\Misc hive.
3. Change the value of the allowupdatefromTMAU key to "1".
4. Change the value of the allowmobile key to "1".
5. Change the value of the Forcemobile key to "1".
6. From the server, copy the ..\PCCSRV\admin\utility\clientpackager\SUCtool.exe file to the client machine.
7. Run the tool and then set the update schedule.

Related Links: solution 1939