<<<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>>>


  Trend Micro Incorporated                              January 19, 2018

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Trend Micro(TM) ServerProtect(TM) for Storage 6.0 English Version     
                       Critical Patch - Build 1164
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     
     Contents
     ====================================================

     1.  Overview of this Critical Patch Release

         1.1 Issues

         1.2 Files Included in this Release

     2.  Documentation Set

     3.  System Requirements

     4.  Installation

         4.1 Installing

         4.2 Uninstalling

     5.  Post-installation Configuration

     6.  Known Issues

     7.  Release History

     8.  Contact Information

     9.  About Trend Micro

     10. License Agreement

     ====================================================


1. Overview of this Critical Patch Release
========================================================================
   This critical patch adds a special antivirus program compatibility
   registry key required to install the KB4056892 update from 
   Microsoft(TM) on protected computers. 

   NOTE: Install this critical patch before completing any procedure
         in this section (see "Installation").


   1.1 Issues
   =====================================================================
   The following enhancement is included in this critical patch:
    
   Enhancement: This critical patch adds a special antivirus program 
                compatibility registry key to the Normal Server and 
                Information Server. Microsoft(TM) checks for this 
                special registry key value on the computer before 
                running the next Security Update for Windows.

                Microsoft KB4056892 was released in January 4, 2018 and 
                requires the new registry key installed before you can 
                apply the update.

                For more information about Microsoft KB4056892, refer 
                to the following link: 

                https://support.microsoft.com/en-us/help/4056892/
                        windows-10-update-kb4056892        
                
                This registry is created automatically each time spntsvc 
                restarts even after this key has been deleted. 
                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Procedure:  To disable this behavior:

                a. Install this critical patch (see "Installation").

                b. Open the Registry Editor.

                c. Add the following key:

                   Key="HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\
                         ServerProtect\CurrentVersion\SpntService"
                   Name="DisableSUVPCompat"
                   Type="REG_DWORD"
                   Value="0x00000001"                   
                 
          
   1.1 Files Included in this Release
   =====================================================================

   A. Files for Current Issue
   ---------------------------------------------------------------------
      Module File Name                            Build No.    
      ====================                        =========
      32-bit Normal Server
       SpntSvc.exe                              6.00.0.1164

       
      64-bit Normal Server     
       SpntSvc.exe                              6.00.0.1164


   B. Files for Previous Issues
   --------------------------------------------------------------------- 
      Module File Name                            Build No.    
      ====================                        =========
      32-bit Normal Server
       NtIcapServer.dll                         6.00.0.1164
       EventMsg2.dll                            6.00.0.1164
       StRpcSrv.dll                             6.00.0.1164 
       StCommon.dll                             6.00.0.1164
       LogMaster.dll                            6.00.0.1164
       NtApRPC.dll                              6.00.0.1164
       LogViewer.exe                            6.00.0.1164
       DCE.dll                                  6.00.0.1164
       Notification.dll                         6.00.0.1164
       Eng50.dll                                6.00.0.1164
       StUpdate.exe                             6.00.0.1164
       log.conf                                 n/a
       
      64-bit Normal Server     
       NtIcapServer.dll                         6.00.0.1164
       EventMsg2.dll                            6.00.0.1164
       StRpcSrv.dll                             6.00.0.1164  
       StCommon.dll                             6.00.0.1164
       LogMaster.dll                            6.00.0.1164
       NtApRPC.dll                              6.00.0.1164
       LogViewer.exe                            6.00.0.1164     
       DCE.dll                                  6.00.0.1164   
       Notification.dll                         6.00.0.1164 
       Eng50.dll                                6.00.0.1164 
       StUpdate.exe                             6.00.0.1164   
       log.conf                                 n/a

      Information Server
       EarthAgent.exe                           6.00.0.1164
       Notification.dll                         6.00.0.1164

      Management Console
       Admin.exe                                6.00.0.1164
       Adm_enu.dll                              6.00.0.1164

      MCP CMAgent
       ProductLibrary.dll                       6.00.0.1164
       CMAgent.exe                              6.00.0.1164
       
      Patch Files
       Tmpatch.exe                              2.2.0.1046
       Setup.ini                                n/a
       Hotfix.ini                               n/a
       readme.txt                               n/a
       license.txt                              n/a  


2. Documentation Set
========================================================================
   To download or view electronic versions of the documentation set for 
   this product, go to http://docs.trendmicro.com


3. System Requirements
========================================================================
   Install this critical patch only on endpoints protected by 
   ServerProtect for Storage 6.0 EN.

   You can download this patch from the following website:

   http://www.trendmicro.com/download
   


4. Installation
========================================================================
   This section explains key steps for installing the critical patch.


   4.1 Installing
   =====================================================================
   To install:
  
   1. Extract the contents of the 
      "spfs_600_win_en_criticalpatch1164.zip" file to a temporary folder 
      on the Information Server. 
      
   2. If needed, define the target server:

      a. Open the "hotfix.ini" file in the "filegroup1" folder using a 
         text editor.

      b. In the "Common" section of "hotfix.ini", locate the  
         "Server=Server_Name" string. 

      c. Replace "Server_Name" with the target server name(s), 
         separating multiple server names with a comma.

         NOTE: If "Server_Name" is left blank, the critical patch 
               deploys to all Normal Servers managed by the 
               Information Server.

      d. Save the changes and close the "hotfix.ini" file.

   3. Close the Management Console.
    
   4. Run "TmPatch.exe" to copy the critical patch files to the correct 
      destination. The License Agreement appears.
   
   5. Read the License Agreement and click "OK" if you agree with the
      license conditions to finish the installation.
      
      NOTE: The setup will not continue if you do not agree to the 
            setup license conditions.

      The critical patch files are automatically deployed to all scan      
      servers managed by the Information Server.
   
   6. If the Management Console is not installed on the same server as 
      the Information Server:

      a. Rename "Admin.exe" in the Management Console's home directory 
         to "Admin.exe.hfb1164".
          
      b. Rename "Adm_enu.dll" in the Management Console's home directory 
         to "Adm_enu.dll.hfb1164".

      c. Copy the "Admin.exe" and "Adm_enu.dll" from the Information 
         Server's home directory to the Management Console's home 
         directory.

   7. If the Management Console is not installed on the same server as
      both the Information Server and Normal Server, manually add the
      following key on the server where the Management Console is 
      installed:

      Key="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
              \CurrentVersion\QualityCompat"
      Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"
      Type="REG_DWORD”
      Value="0x00000000”


   4.2 Uninstalling
   =====================================================================
   To roll back to the previous build:

   1. On the Normal Server, run the following shell command to stop the 
      Normal Server service:
        
      net stop spntsvc
       
   2. On the Normal Server, rename the backup files in the ServerProtect 
      home directory and use these to replace the current files. The 
      names of the backup files have ".bak" in the extension.
       
   3. If the Management Console is installed on the same server with 
      the Information Server, open the Information Server's home 
      directory and copy the files from the 
      ".\backup\hfb1164\filegroup10" folder to the current directory.
    
      If the Management Console is not installed on the same server
      with the Information Server, open the Management Console's home 
      directory, and then rename "Admin.exe.hfb1150" to "Admin.exe" and
      rename "Adm_enu.dll.hfb1164" to "Adm_enu.dll".

   4. On the Information Server, run the following shell command to 
      stop the Management Communication Protocol (MCP) CMAgent service:
        
      net stop ServerProtectCMAgent
       
   5. On the Information Server, open the Information Server's home 
      directory and copy the files from the 
      ".\backup\hfb1164\filegroup100" folder to the ".\CMAgent" folder.
       
   6. On the Information Server, run the following command to start the 
      MCP CMAgent service:
      
      net start ServerProtectCMAgent 
       
   7. On the Normal Server, run the following command to start the 
      Normal Server service:
      
      net start spntsvc

 
5. Post-installation Configuration
========================================================================
   No post-installation steps are required.

   NOTE: Trend Micro recommends that you update your scan engine and  
         virus pattern files immediately after installing the product.


6. Known Issues
========================================================================
   There are no known issues for this critical patch release.


7. Release History 
========================================================================
   For more information about updates to this product, go to:

   http://www.trendmicro.com/download


8. Contact Information  
========================================================================
   A license to Trend Micro software usually includes the right to
   product updates, pattern file updates, and basic technical support
   for one (1) year from the date of purchase only. After the first
   year, you must renew Maintenance on an annual basis at Trend Micro's
   then-current Maintenance fees.

   Contact Trend Micro via fax, phone, and email, or visit our website
   to download evaluation copies of Trend Micro products.

   http://www.trendmicro.com/us/about-us/contact/index.html

   NOTE: This information is subject to change without notice.
         

9. About Trend Micro  
========================================================================
   Smart, simple, security that fits

   As a global leader in IT security, Trend Micro develops innovative
   security solutions that make the world safe for businesses and
   consumers to exchange digital information.

   Copyright 2018, Trend Micro Incorporated. All rights reserved.

   Trend Micro, ServerProtect, and the t-ball logo are trademarks of 
   Trend Micro Incorporated and are registered in some jurisdictions. 
   All other marks are the trademarks or registered trademarks of their 
   respective companies.


10. License Agreement  
========================================================================
    View information about your license agreement with Trend Micro at: 
    www.trendmicro.com/us/about-us/legal-policies/license-agreements

    Third-party licensing agreements can be viewed:
    - By selecting the "About" option in the application user interface
    - By referring to the "Legal" page of the Administrator's Guide