trend micro agent installation to azure vms using automation runbook powershell

AVR 21 Reputation points
2022-11-02T11:47:43.69+00:00

Hi ,

I am trying to install .Ps1 script to install trend micro agent on azure VMs using automation runbook powershell but its throwing an error like below.. But i was able to ran script using Run Command from Azure VM and installed agent successfully

Directory: C:\Users\Client\AppData\Roaming\Trend Micro\Deep Security Agent  

Mode LastWriteTime Length Name
---- ------------- ------ ----
d---- 11/2/2022 10:48 AM installer
Transcript started, output file is C:\Users\Client\AppData\Roaming\Trend Micro\Deep Security Agent\installer\dsa_deploy.log
10:48:53 AM - DSA download started
10:48:53 AM - Download Deep Security Agent Package
https://workload.sg-1.cloudone.trendmicro.com:443/software/agent/Windows/x86_64/agent.msi
Failed to download the Deep Security Agent. Please check if the package is imported into the Workload Security Manager.

Azure Automation
Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,113 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,361 questions
{count} votes

3 answers

Sort by: Most helpful
  1. Bjoern Peters 8,781 Reputation points
    2022-11-02T13:02:37.507+00:00

    Hi @AVR

    Which user is running the automation?
    Which user is running the script on the VM?

    Do those users have permission to download and store software on that VM?
    Maybe a different GPO is enabled for remote connections than a local session?

    If you are running that script locally... are you doing this with administrative rights? So you (maybe) have more permissions during the execution than the automation user?!

    What does your script (part of it) look like?
    It might be essential to see how you connect to the VM and start the installation.

    0 comments No comments

  2. AVR 21 Reputation points
    2022-11-02T13:35:15.097+00:00

    256414-image.png

    I have attached screen shot of VM , i was connected to azure VM via azure Portal and ran the script works fine

    But when i trying to use automation account with system managed identity .its failed.
    automation account has permissions .

    0 comments No comments

  3. Limitless Technology 43,931 Reputation points
    2022-11-03T08:45:21.847+00:00

    Hello

    Since the issue occurs with the connection and run of a 3rd Party application, I would recommend to contact Trendmicro support or their Community as they may have more sample experience or even already an answer recorded.

    On my side, I can say that Deep Security Agent, uses 1.2 TLS by default, and it could be disabled on your VM, please check the next article to enable it.
    https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/enable-support-tls-environment?tabs=azure-monitor

    -----------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--