Migrate cloud accounts to Trend Vision One Endpoint Security - Server & Workload Protection

Upgrade to Trend Vision One Endpoint Security - Server & Workload Protection is a multi-step process.

You may have used cloud connectors to add cloud accounts to Deep Security. You can use the migration tool or migration API to migrate protected cloud accounts.

Prerequisites

  • Ensure that you are running Deep Security Manager 20.0.635 (20 LTS Update 2022-04-21) or later.
  • If you have not done so already, complete the earlier steps described in Upgrade to Trend Vision One Endpoint Security - Server & Workload Protection, including configuring Trend Vision One Endpoint Security - Server & Workload Protection account, creating an API key, and preparing a link to Trend Vision One Endpoint Security - Server & Workload Protection.

Migrate AWS accounts

The procedure to migrate registered AWS accounts depends on how they were originally added to Deep Security Manager:

  • AWS accounts added using access keys can be migrated using the migration tool or migration API. For more information, see Update a legacy AWS connection.
  • AWS accounts added using cross-account roles are not supported in Trend Vision One Endpoint Security - Server & Workload Protection so you cannot migrate these accounts. For information on how to add the cloud accounts manually, see Cloud accounts.
  • AWS accounts added using manager instance roles are not supported on Trend Vision One Endpoint Security - Server & Workload Protection. Migration of these accounts is not supported.
  • Legacy AWS accounts that were added in Deep Security Manager 9.6 or earlier are not supported because they are not accessible via the API endpoint /api/awsconnectors.

Migrate other cloud accounts using the migration tool

  1. In the upper-right corner of the Deep Security Manager console, select Support > Upgrade to Trend Vision One Endpoint Security.
  2. In the Upgrade to Trend Vision One Endpoint Security dialog that appears, select the Cloud Accounts tab to display all connected cloud accounts that support migration.
  3. Select the accounts that you want to migrate and click Migrate Selected.
  4. When the migration begins, click Refresh to check the migration status. Possible statuses are:
    • Migration requested: Cloud account migration to Trend Vision One Endpoint Security - Server & Workload Protection has been requested, but the migration has not started yet.
    • Migrating: Cloud accounts are being migrated to Trend Vision One Endpoint Security - Server & Workload Protection and a full synchronization has been started. This process might take time to complete.
    • Migrated: Cloud accounts have been migrated successfully to Trend Vision One Endpoint Security - Server & Workload Protection.
    • Failed: Cloud accounts have failed to migrate to Trend Vision One Endpoint Security - Server & Workload Protection. Check the error code:
      • Error codes less than 900: There is a failure from Trend Vision One Endpoint Security - Server & Workload Protection, see the fail system event for response detail or contact support.
      • Error codes greater than or equal to 900: Deep Security Manager has a problem communicating with Trend Vision One Endpoint Security - Server & Workload Protection. Ensure that the Trend Vision One Endpoint Security - Server & Workload Protection Link is correctly configured or check server0.log for details.

Migrate VMware vCloud accounts

Currently, you cannot automatically migrate VMware vCloud accounts to Trend Vision One Endpoint Security - Server & Workload Protection. However, you can create new VMware vCloud connectors in your Trend Vision One Endpoint Security - Server & Workload Protection account to protect them. Trend Micro recommends setting up the connectors before migrating the host.

For information on how to set up cloud connectors in Trend Vision One Endpoint Security - Server & Workload Protection, see Add virtual machines hosted on VMware vCloud.