Press CTRL+K to open search

Deploy Trellix Agent for OT

  • Published on Aug 17, 2026
  • 3 minute(s) read
Prev Next

  1. Verify system requirements.

  2. Install the SIR ePO extension.

  3. Deploy Trellix Agent.

  4. Configure and apply System Information Reporter (SIR) policies in Trellix ePO.

  5. Generate reports and queries.

Verify system requirements

Ensure your environment meets the minimum requirements for SIR to function correctly.

  • Trellix Agent version 5.8.4 or later.

  • Trellix ePO version 5.10 or later.

  • Operating Systems: Microsoft Windows 7 SP1 or later, Microsoft Windows Server 2008 R2 or later.

  • Environment: SIR requires Trellix ePO On-prem and cannot be used with ePO SaaS.

Install the SIR ePO extension

You can install the System Information Reporter extension on the ePO server. The extension file is in .ZIP format.

  1. Create a temporary folder on your local drive.

  2. Download the SIR_ePOExtension.zip archive and save it to the temporary folder.

  3. Log on to your ePO console as an administrator.

  4. Go to Configuration → Extensions → Install Extension. The Install Extension dialog box is displayed.

  5. Click Browse to locate the extension file SIR_ePOExtension.zip, then click OK. The Install Extension page appears with the extension name and version details.

Deploy Trellix Agent

You can deploy Trellix Agent 5.8.4 on Windows systems using:

Configure and apply System Information Reporter (SIR) policies

You can create, configure and apply SIR policies in ePO to collect endpoint data and manage the registry.

  1. Collect system information from endpoints.

  2. Modify or restore registry settings on endpoints.

  3. Apply and enforce your policies.

  4. Secure SIR usage with custom permission sets.

Generate reports and queries in ePO

Use the data collected by SIR to create custom queries and reports in Trellix ePO. This allows you to analyze and visualize system information from across your environment.

Note

When building reports, some data may look duplicated. For example, if you only select "Software Version," you might see the same version number listed multiple times for different products. To get a clear and useful report, always add general properties with a specific identifier, such as selecting "Software Name" with "Software Version".

System Information Reporter supports the following reports:

  • List of Applications: Creates a report of all applications installed on the managed computers, including hidden applications.

  • List of Processes: Generates a report of all processes running on the managed computers, along with their IDs.

  • List of Services: Provides a list of all services on the managed computers and shows their current status.

  • Product Protection View: Reports on the properties of other managed products, such as their patch levels and hotfixes.

  • System Information Properties: Gathers general system details you have collected, such as USB devices, network cards, and software versions. See Trellix ePO On-prem Product guide for more information on how to create Permission Set.

:
Related articles