<> Trend Micro Incorporated January 17, 2018 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ServerProtect(TM) 5.80 for Network Appliance Filers English Version Critical Patch - Build 1245 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ========================================================== 1. Overview of This Critical Patch Release 1.1 Issues 1.2 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Critical Patch Release ====================================================================== This critical patch adds a special antivirus program compatibility registry key required to install the security update from Microsoft(TM) on protected computers. NOTE: Install this critical patch before completing any procedure in this section (see "Installation"). 1.1 Issues =================================================================== This critical patch includes the following enhancement: Enhancement: This critical patch adds a special antivirus program compatibility registry key to the Normal Server and Information Server. Microsoft checks for this special registry key value on the computer before running the next Security Update for Windows(TM). NOTE: Microsoft KB4056892 was released in January 4, 2018 and requires the new registry key installed before you can apply the update. For more information about Microsoft KB4056892, refer to the following link: https://support.microsoft.com/en-us/help/4056892/ windows-10-update-kb4056892 This registry is created automatically each time spntsvc restarts even after this key has been deleted. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Procedure: To disable this behavior: a. Install this critical patch (see "Installation"). b. Open the Registry Editor. c. Add the following key: Key="HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\ ServerProtect\CurrentVersion\SpntService" Name="DisableSUVPCompat" Type="REG_DWORD" Value="0x00000001" 1.2 Files Included in This Release =================================================================== A. Files for Current Issue ------------------------------------------------------------------- Filename Build Number ------------------------------------------------------------------- 32-bit Normal Server SpntSvc.exe 5.80.0.1245 64-bit Normal Server SpntSvc.exe 5.80.0.1245 B. Files for Previous Issues ------------------------------------------------------------------- 32-bit Normal Server DCE.dll 5.80.0.1245 eng50.dll 5.80.0.1245 LogMaster.dll 5.80.0.1245 LogViewer.dll 5.80.0.1245 Notification.dll 5.80.0.1245 NtApRPC.dll 5.80.0.1245 StCommon.dll 5.80.0.1245 StRpcSrv.dll 5.80.0.1245 StUpdate.exe 5.80.0.1245 64-bit Normal Server DCE.dll 5.80.0.1245 eng50.dll 5.80.0.1245 LogMaster.dll 5.80.0.1245 LogViewer.dll 5.80.0.1245 Notification.dll 5.80.0.1245 NtApRPC.dll 5.80.0.1245 StCommon.dll 5.80.0.1245 StRpcSrv.dll 5.80.0.1245 StUpdate.exe 5.80.0.1245 Information Server EarthAgent.exe 5.80.0.1245 Notification.dll 5.80.0.1245 MCP CMAgent ProductLibrary.dll 5.80.0.1245 CMAgent.exe 5.80.0.1245 Patch Files Tmpatch.exe 2.0.0.1054 Setup.ini n/a Hotfix.ini n/a readme.txt n/a license.txt n/a 2. Documentation Set ====================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com In addition to this Readme file, the documentation set for this product includes the following: - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining ServerProtect. To access the Online Help, go to http://docs.trendmicro.com - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying ServerProtect. - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining ServerProtect. - Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get ServerProtect "up and running". - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to http://esupport.trendmicro.com 3. System Requirements ====================================================================== Install this critical patch only on computers protected by ServerProtect 5.80 for Network Appliance Filers English Version Service Pack 1 Patch 1. 4. Installation ====================================================================== This section explains key steps for installing the critical patch. 4.1 Installing =================================================================== To install: 1. Close the Management Console. If this is not running at the time of installation, proceed with the next step. 2. Copy the "spnaf_580_win_en_criticalpatch1245.exe" patch installation file to a temporary folder. 3. Run the patch file. The License Agreement appears. 4. Read the License Agreement and click "OK" if you agree with the license conditions to finish the installation. NOTE: The setup will not continue if you do not agree to the setup license conditions. The critical patch files are automatically deployed to all scan servers managed by the Information Server. 5. If the Management Console is not installed on the same server as the Information Server: a. Rename "Admin.exe" in the Management Console's home directory to "Admin.exe.hfb1245". b. Rename "Adm_enu.dll" in the Management Console's home directory to "Adm_enu.dll.hfb1245". c. Copy the "Admin.exe" and "Adm_enu.dll" from the Information Server's home directory to the Management Console's home directory. 6. If the Management Console is not installed on the same server as both the Information Server and Normal Server, manually add the following key on the server where the Management Console is installed: Key="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion\QualityCompat" Name="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD” Value="0x00000000” 4.2 Uninstalling =================================================================== To roll back to the previous build: 1. On the Normal Server, run the following shell command to stop the Normal Server service: net stop spntsvc 2. On the Normal Server, rename the backup files in the ServerProtect home directory and use these to replace the current files. The names of the backup files have ".bak" in the extension. 3. If the Management Console is installed on the same server with the Information Server, open the Information Server's home directory and copy the files from the ".\backup\hfb1245\filegroup10" folder to the current directory. If the Management Console is not installed on the same server with the Information Server, open the Management Console's home directory, and then rename "Admin.exe.hfb1245" to "Admin.exe" and rename "Adm_enu.dll.hfb1245" to "Adm_enu.dll". 4. On the Information Server, run the following shell command to stop the Management Communication Protocol (MCP) CMAgent service: net stop ServerProtectCMAgent 5. On the Information Server, open the Information Server's home directory and copy the files from the ".\backup\hfb1245\filegroup100" folder to the ".\CMAgent" folder. 6. On the Information Server, run the following command to start the MCP CMAgent service: net start ServerProtectCMAgent 7. On the Normal Server, run the following command to start the Normal Server service: net start spntsvc 5. Post-Installation Configuration ====================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ====================================================================== There are no known issues for this critical patch release. 7. Release History ====================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ====================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ====================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2018, Trend Micro Incorporated. All rights reserved. Trend Micro, ServerProtect, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ====================================================================== View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide