The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Using a third-party tool

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

You can use a third-party deployment tool like Microsoft System Center Configuration Manager, IBM BigFix, or Tanium Deploy to install Trellix Endpoint Security (ENS) 26.x on your endpoints with a command line.

You can retrieve the installation packages from the Trellix Product Downloads site using a valid grant number.

This method lets you install Trellix ENS using the same tool and automated processes that you use to install other products in your environment.

Note

The installer now automatically detects missing Root or Intermediate certificates on the endpoint before proceeding. This check prevents installation failures caused by incomplete certificate chains.

  1. Before the installation:

    1. Verify that all endpoints meet the minimum requirements (KB82761).

    2. Verify that required patches are applied to the endpoints (KB96488) .

    3. Verify that you're aware of compatibility requirements for other installed products.

    4. Get your grant number in the email from Trellix that confirmed your subscription. You need your grant number and this email address to download software.

    5. Have this information ready for deployment: a descriptive name for the deployment task, the file name for the installer, and the command line to run the deployment (for example, setupEP.exe ADDLOCAL="tp,atp,fw,wc").

    6. On endpoints running Microsoft Windows 10 October 2018 Update or later, verify that the case-sensitivity attribute is disabled for folders in your source and target installation paths and \Windows\System32\drivers.

    7. Verify that endpoint users have permission to access the user temp folder (KB85033).

    8. Verify that the MsgBus Cert Updater package has been updated to the latest version on the endpoints (000014338).

    9. Verify that the newer Root Certificates have been applied to the endpoints (KB91697).

    10. Detect and allow trusted third-party software to make sure that they work with Trellix ENS by running Trellix SysPrep (KB89860).

    11. Provide accurate reputation values to Trellix Global Threat Intelligence by running Trellix GetClean (KB73044).

  2. Install product extensions on Trellix ePO - On-prem.

  3. Update content files on Trellix ePO - On-prem.

  4. Download installation packages.

  5. Deploy product software to endpoints.

  6. After the installation:

    1. Disable the Windows firewall to avoid conflicts with McAfee Host IPS rules.

    2. If third-party applications aren't working correctly after you install McAfee Host IPS, and you didn't preconfigure custom Firewall rules, temporarily enable Adaptive Mode.

    3. Configure your policy settings for your environment, as needed.