- Title: EndPoint Protection (Trend Micro Anti-Virus) — Agent Installation SOP
- Prepared by: HPE Team, for Department of Posts (DOP) IT Modernization 2.0 project
- Version: 1.5, dated 14 July 2026
- Marked: Confidential to DOP and HPE
What It Covers
Objective
A standard operating procedure (SOP) explaining how to install the Endpoint Protection Platform (EPP) agent — Trend Micro Apex One — on DOP’s Windows systems.
Scope
Applies to all authorized Windows endpoint devices within the Department of Posts.
Prerequisites for Installation
- Minimum system requirements (Windows 7/8/10/11, minimum processor, 2GB RAM, 3GB disk space)
- Administrative rights on the device
- A stable MPLS network connection (no VPN active during install)
- DNS resolution and port connectivity checks to the designated internal server
- Windows must be genuine and activated, with latest patches
Installation Steps (General Flow)
- Check endpoint prerequisites
- Validate network prerequisites
- Download the installer package from the internal portal
- Run the installer, accept the license agreement
- Complete installation and restart the system
- Note: installing this agent automatically removes any existing Symantec AV agent
Post-Installation Verification
- Confirm the EPP icon appears in the system tray
- Check “Active” status and latest virus pattern update
- Run a quick scan to confirm it’s working
Troubleshooting
- Common issues include outdated Windows patches blocking installation, and Windows Group Policy or non-activated Windows preventing the installer from running
- Recommended fix: update Windows, ensure activation, then retry
Compliance Requirement
Installation must be completed within 24 hours of receiving the installer, and the agent cannot be disabled or removed without IT approval.
Uninstallation
Only performed centrally by the EPP operations team, with prior IT approval, and verified afterward.
Approval Section
The document ends with a sign-off table for DOP approval of the SOP.