CPM Client Management

About this task

The steps below are for experienced BigFix administrators who just need a list for tasks involving the CPM clients. Procedures include:

Displaying the BigFix Icon on Endpoints

Procedure

In the console, click Endpoint Protection > Core Protection Module > Common Tasks > Core Protection Module > Core Protection Module - Enable Client Dashboard. The Task Description opens.

Viewing Hidden Client Statistics for a Given Account

Procedure

From the endpoint you want to check, press Ctrl + Alt + Shift + T.

Decrypting Quarantined Files

About this task

Note: Decrypting an infected file may spread the virus/malware to other files. Trend Micro recommends isolating the computer with infected files by unplugging it from the network. Move important files to a backup location.

When you decrypt or encrypt a file, CPM creates the decrypted or encrypted file in the same folder. For example: type VSEncode [-d] [-debug]to decrypt files in the suspect folder and create a debug log.

Required the following files:

  • Main file: VSEncode.exe

  • Required DLL files: Vsapi32.dll

Run Restore Encrypted Virus using the following parameters:

no parameter {encrypt files in the Suspect folder} -d (decrypt files in the Suspect folder) -debug {create debug log and output in the client temp folder} /o {overwrite encrypted or decrypted file if it already exists} /f <filename> {encrypt or decrypt a single file} /nr {do not restore original file name}

Deploying CPM Clients

Procedure

  1. Click Endpoint Protection > Core Protection Module > Deployment > Install.
  2. Click Core Protection Module - Endpoint Deploy.

Removing CPM Clients

Procedure

  1. In the console, click Endpoint Protection > Core Protection Module > Deployment > Uninstall.
  2. Click Core Protection Module - Endpoint Uninstall in the list of Actions that appears.

Enabling the Client Console

Procedure

  1. In the console navigation pane, click Endpoint Protection > Core Protection Module > Configuration > Global Settings > Global Settings Wizard.
  2. In the Global Scan Settings Wizard, scroll down to the Client Console Settings.
  3. Check the appropriate check boxes:

    • Click Enable system tray icon to display the icon used to access the client console on the relevant endpoints

    • Click Enable the manual scan shortcut in Windows Explorer context menu to allow initiating a manual scan from Windows™ Explorer.

  4. Click the Create Global Settings Configuration Task... button. The Edit Task window opens.
  5. Type a descriptive or memorable name for the Task such as "Enable Client Console."
  6. Click OK to close the windows. At the prompt, type your private key password and click OK to create the new global policy.
  7. The new settings now appear at Endpoint Protection > Core Protection Module > Configuration > Global Settings list.

Enabling Notifications on the Client

About this task

Use the On-Demand or Real-Time Scan Settings Wizards to display notifications on the client computer about virus/malware or spyware/grayware detections.

Procedure

  1. In the console navigation pane, click Endpoint Protection > Core Protection Module > Configuration > On-Demand Scan Settings or Real-Time Scan Settings.
  2. Click the Wizard link.
  3. Click the Scan Action tab.
  4. Select the appropriate check boxes:

    • In the Virus/Malware pane, select Display a notification message on the client computer when virus/malware is detected (Windows only).

    • In the Spyware/Grayware Action (Windows only) pane, select Display a notification message on the client computer when spyware/grayware is detected.

  5. Click the Create Configuration Task... button. The Edit Task window appears.
  6. Type a descriptive (or memorable) name for the Task such as "Enable endpoint notification".
  7. Click OK to close the windows. At the prompt, type your private key password and click OK to create the new global policy.
  8. The new settings now appear in the Endpoint Protection > Core Protection Module > Configuration > On-Demand Scan Settings or Real-Time Scan Settings list.