Agent platform compatibility

Workload Security agents can be installed on the operating systems (OS) and containers shown below. If platform support was added in an update release, the minimum update version is noted next to the check mark in the table.

Workload Security supports the use of older agent versions, but we do encourage you to upgrade agents regularly. New agent releases provide additional security features and protection, higher quality, performance improvements, and updates to stay in sync with releases from each platform vendor. Each agent has an end-of-life date. For details, see Deep Security Agent LTS life cycle dates and Deep Security Agent FR life cycle dates.

The agent can be installed to protect various cloud, virtual, or physical environments, if the operating system and kernel are supported.

Not all agent features are available on all platforms. See Supported features by platform.

If you have agent version 20.0.0-1558 or earlier, and a firewall that filters incoming traffic, you may need to configure your firewall to allow agent activation.

• Support for these releases is ending soon. Please upgrade to version 20 as soon as possible.

•• Standard support is ending soon for these platforms. For details, see Note 11.

If platform support was added in an update or FR release, the minimum update or FR version is noted next to the check mark in the table. Examples: Examples: ✔ 2021-01-18, ✔ U1, ✔FR 2020-05-04.

Note 1: Microsoft releases regular, semi-annual releases for Microsoft Windows 10 and Windows Server Core. For details about which specific releases are supported, see Deep Security Support for Windows 10 and Deep Security Support for Windows Server Core.

Note 2: All Trend Micro testing on Windows Embedded platforms is performed in a virtualized environment. Because these operating systems are typically run on custom hardware (for example, on point-of-sale terminals), customers must plan to thoroughly test on their target hardware platform prior to deployment in a production environment. In addition, before raising support cases, customers should attempt to reproduce problems in a virtualized environment because this is the environment the Trend Micro support team has available. If the issue is specific to deployments on custom hardware, Trend Micro may require the customer to provide us with remote access to a suitable environment before we can fully respond to support cases. Note that Windows 10 IoT was formerly named Windows 10 Embedded, and is therefore included in the list of Windows Embedded platforms.

Note 3: The agent is supported with both Full/Desktop Experience and Server Core installations of Windows Server 2012 and later. For Windows Server 2008 and 2008 R2, only Full installations are supported.

Note 4: The following AIX configurations are supported:

• AIX LPARs running on the PowerVM Hypervisor on Power Servers.
• AIX running as the bare metal OS on Power Servers.

Agent version 12.0 for AIX is supported on both Power8 and Power9 processor-based systems.

Note 5: Microsoft has changed their signing policy to use only SHA-2. For information on compatibility and required Microsoft security updates, see:

• Updated guidance for use of Trend Micro Deep Security to protect Windows 2003, Windows XP, and Windows 2000 based systems
• New versions of Trend Micro Deep Security Agents for Windows will only be signed with SHA-2 (also available in Japanese.)

Also, Windows XP is supported only with agent version 10.0 Update 25 or earlier and it will not be supported with future updates. Windows 2003 is supported with agent version 10.0 Update 25 or earlier. It is not supported with Updates 26, 27, and 28, but support will be reintroduced in agent version 10.0 Update 29. For more information, see Deep Security Agent version 10 update 26 cannot be used for installation or upgrade on Windows XP/2003.

For Windows 2008, the minimum supported version will be SP2; for Windows 2008 R2, the minimum supported version will be SP1.

Note 6: AlmaLinux 8 is currently supported using the Red Hat Enterprise Linux 8 agent version 20.0.0-3165+.

Note 7: Rocky Linux 8 is currently supported using Deep Security Agent version 20.0.0-3288+ for Red Hat Enterprise Linux 8.

Note 8: Microsoft releases regular, semi-annual releases for Microsoft Windows 11. For details about which specific releases are supported, see Trend Micro Cloud One - Workload Security and Deep Security Support for Windows 11.

Note 9: Rocky Linux 9 is currently supported using Deep Security Agent version 20.0.0-6313+ for Red Hat Enterprise Linux 9.

Note 10: Microsoft changed code signing requirements, but has not released a patch for this OS. Therefore the last supported update release for Deep Security 20 is in January 2023.

Note 11: In the second half of 2023, Deep Security Agent 20 for Windows Server 2008, AIX 6.1, and Debian 8 will reach end of standard support. For more information see https://success.trendmicro.com/dcx/s/solution/000292157.

Docker compatibility

You can use agent 10.0+ to protect Docker hosts and containers running on Linux distributions. Windows is not supported.

Each agent long-term support (LTS) release supports all Docker Enterprise Edition (EE) versions that have not reached end-of-life. (See Announcing Docker Enterprise Edition.) We do not officially support Docker Edge releases, but strive to test against Docker Edge releases to the best of our ability.

Support for new stable Docker releases is introduced with each release of the agent. We recommend that you refrain from upgrading to the latest stable release of Docker until Trend Micro documents the support statements for the latest agent release.

Agent support for Docker releases includes any sub-versions of those releases. For example, agent version 11.0 supports Docker 17.09-ce including its sub-versions: 17.09.0-ce and 17.09.1-ce.

Before deploying the agent into your target environment, you should ensure that Docker supports your target environment and platform configuration.

Systemd support

Some versions of the agent for Linux support systemd. See the table below for details.

If systemd support was added in an update or FR release, the minimum update or FR version is noted next to the check mark in the table. Examples: ✔ U1, ✔FR 2020-05-19.

SELinux support

Security-Enhanced Linux (SELinux) enforcing mode is supported on these OS and agent combinations, using the default SELinux policies:

Anti-malware software such as the agent must run in an unconfined domain in order to protect the system. Any additional SELinux policy customization or configuration may cause the agent to be blocked.

If any alerts occur, see Troubleshoot SELinux alerts.

Secure Boot support

Some versions of the agent support the Secure Boot feature. See the table below and Linux Secure Boot support for agents.

Secure Boot is not available for Azure VMs.

Linux minor version support

Trend Micro releases agents for major Linux versions (like RHEL 8), as described in the Agent platform support table, above. Minor Linux versions (like RHEL 8.x) are also supported if they use a kernel that we support.

To determine whether a minor Linux version is supported:

1. Find the kernel version for the Linux release. Refer to OS provider's documentation, for example:

   • Red Hat Enterprise Linux: https://access.redhat.com/articles/3078
   • SUSE Linux Enterprise Server: https://www.suse.com/support/kb/doc/?id=000019587
   • Ubuntu: https://wiki.ubuntu.com/Kernel/Support
   • Oracle Linux: https://blogs.oracle.com/scoter/oracle-linux-and-unbreakable-enterprise-kernel-uek-releases

2. Check the Agent Linux kernel support list for the agent version that you plan to use.

3. If the kernel is on the supported list, the agent supports that Linux version.

For example, if you're using Red Hat Enterprise Linux 8.2 and want to know whether it's supported with version 20 of the agent:

1. Check the kernel version for Red Hat Enterprise Linux 8.2. According to the Red Hat article, it's 4.18.0-193.
2. Look for that version in the list of supported kernels for Deep Security Agent 20.
3. Version 4.18.0-193 is listed in the RHEL 8 table on that page, so Deep Security Agent 20 is supported with Red Hat Enterprise Linux 8.2.

Device Control support

Device Control is supported in Deep Security Agent 20.0.0-4959+ for Windows and 20.0.0-158+ for macOS.