How to set up Trellix mobile security using Hexnode?Solved

Hi @ronnie!

Thanks for reaching out! Sorry to hear you’re having trouble with the deployment. To get a better picture, could you confirm a few things?

1. During the EXE app configuration, did you select Install app at system level?
2. Have you tried installing the EXE manually on one device to confirm it runs fine outside Hexnode?

Oh… now that you mention it, I believe I left the installation level at user while configuring the EXE app. I assumed that would be enough since I’m pushing it from Hexnode anyway. Is that what’s causing the issue?

Yes, that’s very likely the root cause!

Trellix requires elevated privileges to install correctly, so it must be deployed at the system level. When installed at the user level, the app installation will fail – exactly what you’re experiencing.

No worries, though! I’ll walk you through the correct step-by-step process to set it up properly.

Step 1: Get the Trellix installer EXE

1. Log in to your Trellix ePO portal.
2. Go to the Product Deployment tab.
3. Create a new deployment package:
   1. Name it.
   2. Set platform to Windows.
   3. Select the Trellix Endpoint Protection Software.
4. Click Save.
5. A pop-up window will appear asking you to download the installer package or copy the installer URL to the clipboard.
6. A pop-up window will appear asking you to download the installer package or copy the installer URL to the clipboard.
7. This downloads an EXE file named TrellixSmartInstall.exe.

Step 2: Upload the EXE file to Hexnode

1. Log in to your Hexnode UEM console.
2. Navigate to Apps > +Add Apps > Enterprise App.
3. Choose the platform as Windows.
4. Fill in:
   1. App name: e.g., Trellix Agent.
   2. App category: EXE File.
   3. Provide a description for the application and click Add to upload the file.

Step 3: Configure and deploy to devices

1. In the Hexnode UEM portal, navigate to Manage > Devices.
2. Select the target Windows devices.
3. Click Actions > Install Application.
4. A window will pop-up for selecting the application.
5. Check only the Windows platform and choose the previously uploaded “Trellix Agent” app.
6. Configure the EXE app installation parameters:
   1. Make sure to enable both Install silently and Install app at system level options.
   2. Since the Trellix installer supports silent installation using the /s parameter, there’s no need to enable Add installation commands.
   3. Specify an appropriate value for the Installation timeout (in minutes). If the app installation process is not complete within the specified time duration, it will be forcefully terminated.
   4. Select the Success Criteria as App exists and provide the identifier {2A9F0B40-E492-410E-9675-5209EE23C09D}.
   5. Enable Retry if the installation fails to allow automatic reattempts if the initial deployment fails.
   6. Use the Maximum number of retries field to define how many retry attempts should be made.
   7. Choose when to retry the app installation process from the Retry drop-down.
7. Click Install.

After deployment, the Trellix agent should be installed silently in the background. You can confirm the installation status under the Action History tab for each device in Hexnode.

That makes a lot of sense. I didn’t realize system-level vs. user-level could make that much of a difference. I’ll reconfigure the app with system-level install and try again.

Really appreciate the breakdown, super helpful.

You’re very welcome! Let me know how it goes or if anything else comes up!