Some of the issues in this article are not considered bugs by Trend and the UFEM team has submitted "Feature Requests", as required by Trend, to include these changes in future versions. Feature requests will be labeled as such below. The UFEM team has submitted trouble tickets to Trend on all issues listed here that are not feature requests.

Terms used in this document

  • OSCE - OfficeScan Corporate Edition

  • TMCM - Trend Micro Control Manager

  • TMSM - Trend Micro Security for Mac

OFFICESCAN INTERACTIONS WITH SCCM AGENTS

https://success.trendmicro.com/solution/1116495-system-center-configuration-manager-sccm-fails-to-deploy-officescan-osce-xg-agent

Unless Trend can provide us an alternative workaround that does not involve disabling PKI authentication, we will not be able to use SCCM to deploy OfficeScan.

Although not mentioned in the KB, what has been observed at UF is that attempting to install SCCM on a machine (via GPO, BES, or manually) that already has OfficeScan installed, will result in an SCCM agent that can't communicate to SCCM servers until the endpoint is rebooted. Once the endpoint is rebooted, and the ccmsetup.exe process is no longer running, the endpoint will then show in the SCCM console. This appears to be due to the endpoint attempting to authenticate to SCCM with the “ofcsslagent” cert described in the KB.

SSL CERTIFICATE AUTHORITY WARNINGS IN CONSOLE

Replacing Trend's self-signed certificates with one from a CA breaks components of the consoles. Until Trend fixes this issue, admins will receive an un-trusted certificate warning in their browser when visiting the Trend consoles.

PROBLEMS VIEWING PDFS IN MYUFL

OSCE's browser plugins cause problems with viewing pdf's in myUfl. Until Trend can fix this issue, we are recommending disabling Web Reputation (Web Reputation is disabled by default on newly installed agents).

TARGETING OF OSCE DASHBOARD ALERTS

Feature Request

  • The OSCE dashboard shows vulnerability alerts for all endpoints at UF

  • Units will see alerts in the dashboard for agents in other unit's domains.

  • A feature request has been sent to Trend to allow more granular data sources for the dashboard alerts.

TARGETING OF NOTIFICATIONS

Feature Request

  • Unit admins don’t have access to the Default domain in OSCE or to the TMSM console, so we are relying on TMCM to supply email notifications on Macs and off-domain PCs.

  • TMCM does not allow us to only send out notifications for certain domains or products.

  • To make sure that units are receiving notifications on Macs and off-domain PCs, we will have to send all notifications to all units.

  • Units will receive notifications for agents in other unit's domains.

  • A feature request has been sent to Trend to allow more granular notification data sources. 

TMSM (MAC MANAGEMENT) LIMITATIONS

Feature Request

A listing of all TMSM issues can be found here. These issues are limitations of the product, and not considered bugs by Trend. We have submitted feature requests to Trend regarding these issues.