Using Trellix ePO - On-Prem 5.10.x or 5.9.x

You can use a deployment task in Trellix ePO - On-prem 5.10.x or 5.9.x 5.10.x or 5.9.x to upgrade to Trellix ENS 26.x on your endpoints. You can upgrade from version 10.2.x, 10.5.x, or 10.6.x.

Deployment tasks can be set up as continuous (for endpoints in specific groups or with specific tags) or fixed (for a static set of endpoints).

Note
For the Intel architectures, you can directly upgrade to version 26.x from version 10.7.0 (November 2022) or later. For the ARM architectures, the upgrades are not supported and upgrade section is not applicable, refer 000014791 for details.

Note
The Endpoint Migration Assistant supports Trellix ENS version 10.7.18 as the final supported version for migrating legacy settings. This version limitation applies to all migration workflows.

Before the installation:
- Verify that all endpoints meet the minimum requirements (KB82761).
- Verify that required patches are applied to the endpoints (KB96488).
- Verify that products installed on endpoints are supported.
- Verify that you're aware of compatibility requirements for other installed products.
- On endpoints running Microsoft Windows 10 October 2018 Update or later, verify that the case-sensitivity attribute is disabled for folders in your source and target installation paths and \Windows\System32\drivers.
- Verify that endpoint users have permission to access the user temp folder (KB85033).
- Verify that the MsgBus Cert Updater package has been updated to the latest version on the endpoints (000014338).
- Verify that the newer Root Certificates have been applied to the endpoints (KB91697).
- Detect and allow trusted third-party software to make sure that they work with Trellix ENS by running Trellix SysPrep (KB89860).
  Note
  Best practice: Use the latest version of the Trellix SysPrep utility when upgrading from version 10.5.3 or earlier, or when new software or policy configurations are used in software metering, software monitoring, or rights management. Check with technical support for the latest version of Trellix SysPrep.
- Provide accurate reputation values to Trellix Global Threat Intelligence by running Trellix GetClean (KB73044).
- If you plan to save custom product settings, review your settings, client tasks, and assignments, consolidating them where possible. Remove duplicates and unused objects.
Note
The installer now automatically detects missing Root or Intermediate certificates on the endpoint before proceeding. This check prevents installation failures caused by incomplete certificate chains.
Upgrade product extensions and installation packages on Trellix ePO - On-prem.
Update content files on Trellix ePO - On-prem.
Deploy product software to endpoints.
After the installation:
- Disable the Windows firewall to avoid conflicts with McAfee Host IPS rules.
- If third-party applications aren't working correctly after you install McAfee Host IPS, and you didn't preconfigure custom Firewall rules, temporarily enable Adaptive Mode.
- Review the policy settings that are new or changed in Trellix ENS 26.x.