Deep Security Agent Linux kernel support

You can also use a JSON version of the complete list of the supported Linux kernels for Deep Security Agent 10.0 and higher with scripts and automated workflows.

Manage kernel support package updates

Trend Micro is introducing a new way of managing your kernel support packages.

Previously, the kernel driver update process always got the latest kernel support package from the Deep Security Relay when an agent was restarted or the system rebooted. This functionality was intended to reduce operational overhead. However, you might not always need a kernel driver change unless the OS kernel is upgraded. That’s why we’re introducing a new feature that enables you to decide when to perform the kernel support package update.

With this new feature, the kernel support package will always be updated when you upgrade to a new kernel that requires a new compatible kernel support package, but you can disable other unnecessary updates.

This new feature requires:

  • Deep Security Manager 20.0.503 +
  • Deep Security Agent 20.0.0.3067 + on supported Linux Deep Security Agent platforms. It is not supported on Windows, AIX, or Solaris.

Disable kernel support package updates on a single agent

  1. In Deep Security Manager, go to the Computers page.
  2. Double-click the computer where you want to disable updates (or select the computer and then the Details button).
  3. Select Settings. Change Automatically update kernel package when agent restarts to No.
  4. Save your changes.

Disable kernel support package updates by policy

This method disables kernel support package updates for all computers protected by the policy.

  1. In Deep Security Manager, go to the Policies page.
  2. Double-click the policy where you want to disable updates (or select the policy and then the Details button). You can also create a new policy instead of updating an existing policy.
  3. Select Settings. Change Automatically update kernel package when agent restarts to No.
  4. Save your changes.