<> Trend Micro Incorporated July 25, 2016 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Endpoint Application Control 2.0 Patch 2 - Agent Build 1219 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: This Readme file was current as of the date above. However, all customers are advised to check Trend Micro's website for documentation updates. GM release documentation: http://docs.trendmicro.com Patch/SP release documentation: http://www.trendmicro.com/download TIP: Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: https://clp.trendmicro.com/FullRegistration?T=TM Contents ========================================================== 1. Overview of This Release 1.1 Resolved Known Issues 1.2 Enhancements 1.3 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Release ====================================================================== This patch updates the AcAgent program to ensure that the AcAgent Notification Window can start successfully without causing a high CPU load and that the AcAgent Service program doesn't further increase the CPU load when running in the process monitoring mode. 1.1 Resolved Known Issues =================================================================== This patch resolves the following issue: Issue 1: CPU usage may surge on an agent endpoint when the notification window is opened by right-clicking "About" or "Log" from the system tray. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: Apply this patch which contains the updated "AcAgentUI.exe" and "AcAgentUINotifiy.exe" files. Issue 2: CPU usage may surge on an agent endpoint when the agent encounters difficulty collecting user process information. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: Apply this patch which contains the updated "AcAgentService.exe" file. Issue 3: The agent "acdriver.sys" may not execute on Windows XP Embedded systems because the file name may be converted to upper case and become unidentifiable to the Endpoint Application Control agent. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 3: Apply this patch which contains the updated "acdriver.sys" and "acdriverhelper.sys" files. Issue 4: Endpoint Application Control is unable to distinguish agents that are installed on duplicated Windows systems where the universally unique identifier (UUID) remained unchanged after the duplication. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 4: Apply this patch which conatins the updated installer "AcAgentSetup_x64" and "AcAgentSetup_x86", available in both the exe and msi format, and modify the endpoint UUID value using the command-line interface. For details, see sections 4.2 in this readme. 1.2 Enhancements =================================================================== There are no enhancements in this patch. 1.3 Files Included in this Release =================================================================== A. Files for Current Issues ------------------------------------------------------------------- ---------------------------------------------------------------- Filename Build No. ---------------------------------------------------------------- AcAgentUI.exe 2.0.0.1219 AcAgentUINotifiy.exe 2.0.0.1219 AcAgentService.exe 2.0.0.1219 acdriver.sys 2.0.0.1031 acdriverhelper.eye 2.0.0.1031 AcAgentSetup_x64.exe 2.0.0.1219 AcAgenzSetup_x86.exe 2.0.0.1219 B. Files for Previous Issues ------------------------------------------------------------------- Not applicable. 2. Documentation Set ====================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com In addition to this Readme file, the documentation set for this product includes the following: - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining Endpoint Application Control. To access the Online Help, go to http://docs.trendmicro.com - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to http://esupport.trendmicro.com 3. System Requirements ====================================================================== You can perform a fresh installation of this patch on computers that are running on any platform supported by Endpoint Application Control or as an upgrade on computers where the agent program is installed. 4. Installation ======================================================================= This section explains key steps for installing the patch. Refer to the Endpoint Application Control Online Help for detailed information. http://docs.trendmicro.com/en-us/enterprise/ endpoint-application-control-20/installation/ agentinstallation.aspx 4.1 Installing =================================================================== To install: 1. Copy the "tmeac_20_win_all_agent_patch2_b1219.zip" file to a local folder. 2. Extract the file "tmeac_20_win_all_agent_patch2_b1219.zip" to a temporary folder, for example, "C:\temp". 3. Choose an agent package (MSI or EXE) and proceed with installation. - To install this patch using an MSI package: a. Run a Microsoft(TM) Windows(TM) command prompt as an administrator. b. Change to the directory where the MSI file is located, for example, "C:\temp". c. Run the relevant command below based on the system architecture and ensure that the command runs in a single line. Note that it runs in silent mode. i. 64-bit: msiexec /i AcAgentSetup_x64.msi REINSTALL="ALL" REINSTALLMODE="vomus" ServerHost=serverIP:port or hostname:port /norestart /qn /l*v C:\temp\AcAgentSetup_x64.log ii. 32-bit: msiexec /i AcAgentSetup_x86.msi REINSTALL="ALL" REINSTALLMODE="vomus" ServerHost=serverIP:port or hostname:port /norestart /qn /l*v C:\temp\AcAgentSetup_x64.log - To install this patch using an EXE package: a. Run a Windows command prompt as an administrator. b. Change to the path where the EXE file is located, for example, "C:\temp". c. Run the relevant command below based on the system architecture and ensure that the command runs in a single line. Note that it runs in silent mode. i. 64-bit: AcAgentSetup_x64.exe ServerHost=ServerIP:port or hostname:port ii. 32-bit: AcAgentSetup_x86.exe ServerHost=ServerIP:port or hostname:port The corresponding upgrade log is automatically generated in the "%temp%" folder (AcAgentSetup_x86.txt or AcAgentSetup_x64.txt) 4. Verify if the patch has been installed successfully. - To verify through the log file, open the log file and check if the product name and version information match the following: Windows Installer reconfigured the product. Product Name: Trend Micro Endpoint Application Control Agent. Product Version: 2.0.0.1219. - To verify through the AgentUI, right-click on the agent system tray icon and select "About Trend Micro Endpoint Application Control". The version number should be "2.0.0.1219". 4.2 Changing the Endpoint UUID Using the Command-line Interface =================================================================== Note: Make sure an agent is installed on the endpoint before changing the endpoint UUID value. Run the command below and ensure that the command runs in a single line. Note that it runs in silent mode. e.g. msiexec /i AcAgentSetup_x64.msi REINSTALL="ALL" REINSTALLMODE="vomus" ServerHost=serverIP:port or hostname:port /norestart /qn /l*v C:\temp\AcAgentSetup_x64.log uuidgen=yes 4.3 Uninstalling =================================================================== No special uninstallation instructions are provided. 5. Post-installation Configuration ====================================================================== No post-installation steps are required. 6. Known Issues ====================================================================== There are no known issues for this patch release. 7. Release History ====================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ====================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ====================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2016, Trend Micro Incorporated. All rights reserved. Trend Micro and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ====================================================================== View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements/ Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide