On self-managed endpoints

Upgrade to Trellix Endpoint Security (ENS) 26.x on endpoints that aren't managed by a network management platform. You can upgrade from version 10.2.x, 10.5.x, or 10.6.x.

Note
For the Intel architectures, you can directly upgrade to version 26.x from version 10.7.0 (November 2022) or later. For the ARM architectures, the upgrades are not supported and upgrade section is not applicable, refer 000014791 for details.

Before the installation:
- Verify that the endpoint meets the minimum requirements (KB82761), installed products are supported (Supported upgrade paths), and you're aware of compatibility requirements (How the installer handles other installed products).
- Verify that required patches are applied to the endpoints (KB96488).
- On endpoints running Microsoft Windows 10 October 2018 Update or later, verify that the case-sensitivity attribute is disabled for folders in your source and target installation paths and \Windows\System32\drivers.
- Verify that you have permission to access the user temp folder (KB85033).
- Verify that the MsgBus Cert Updater package has been updated to the latest version on the endpoints (000014338).
- Verify that the newer Root Certificates have been applied to the endpoints (KB91697).
- Provide accurate reputation values to Trellix Global Threat Intelligence by running Trellix GetClean (KB73044).
- Detect and allow trusted third-party software to make sure that they work with Trellix ENS by running Trellix SysPrep (KB89860).
  Note
  Best practice: Use the latest version of the Trellix SysPrep utility when upgrading from version 10.5.3 or earlier, or when new software or policy configurations are used in software metering, software monitoring, or rights management. Check with technical support for the latest version of Trellix SysPrep.
- If you plan to save your product settings, check that they're set up correctly and up to date.
Note
The installer now automatically detects missing Root or Intermediate certificates on the endpoint before proceeding. This check prevents installation failures caused by incomplete certificate chains.
Run product installer on endpoint.
After the installation:
- Manually update your endpoint with the latest version of the content files required by Trellix ENS for AMCore, Exploit Prevention, and Adaptive Threat Protection.
- Disable the Windows firewall to avoid conflicts with McAfee Host IPS rules.
- If third-party applications aren't working correctly after you install McAfee Host IPS, and you didn't preconfigure custom Firewall rules, temporarily enable Adaptive Mode
- Review the product settings that are new or changed in Trellix ENS 10.7.