trend micro agent installation to azure vms using automation runbook powershell

Question

Hi ,

I am trying to install .Ps1 script to install trend micro agent on azure VMs using automation runbook powershell but its throwing an error like below.. But i was able to ran script using Run Command from Azure VM and installed agent successfully

Directory: C:\Users\Client\AppData\Roaming\Trend Micro\Deep Security Agent  

Mode LastWriteTime Length Name
---- ------------- ------ ----
d---- 11/2/2022 10:48 AM installer
Transcript started, output file is C:\Users\Client\AppData\Roaming\Trend Micro\Deep Security Agent\installer\dsa_deploy.log
10:48:53 AM - DSA download started
10:48:53 AM - Download Deep Security Agent Package
https://workload.sg-1.cloudone.trendmicro.com:443/software/agent/Windows/x86_64/agent.msi
Failed to download the Deep Security Agent. Please check if the package is imported into the Workload Security Manager.

Answer 1

Hi @AVR

Which user is running the automation?
Which user is running the script on the VM?

Do those users have permission to download and store software on that VM?
Maybe a different GPO is enabled for remote connections than a local session?

If you are running that script locally... are you doing this with administrative rights? So you (maybe) have more permissions during the execution than the automation user?!

What does your script (part of it) look like?
It might be essential to see how you connect to the VM and start the installation.

Answer 2

I have attached screen shot of VM , i was connected to azure VM via azure Portal and ran the script works fine

But when i trying to use automation account with system managed identity .its failed.
automation account has permissions .

Answer 3

Hello

Since the issue occurs with the connection and run of a 3rd Party application, I would recommend to contact Trendmicro support or their Community as they may have more sample experience or even already an answer recorded.

On my side, I can say that Deep Security Agent, uses 1.2 TLS by default, and it could be disabled on your VM, please check the next article to enable it.
https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/enable-support-tls-environment?tabs=azure-monitor

-----------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--