Skip to main content

CollectorsCloud Collectors Administration Guide

Add Accounts for Trend Micro Cloud Collectors

You can use your Trend Micro account across one or more Trend Micro Cloud Collector instances. Before you can add your account, you must identify the authentication method and obtain the identifying information.

To create a Trend Micro account perform each of the following workflows:

Create a Custom User Role

To create a custom user role that is required for configuring permissions and asset visibility scope for Trend Vision One user accounts:

so the role is needed for us to assign permissions and set the asset visibility scope?clarify if possible.

  1. Log in to the Trend Vision One console with your registered credentials as an administrator.

  2. Navigate to Administration > User Roles > Add Role. For more information, see User Roles in the Trend Micro Documentation.

    Trend_micro_user_role_1.png

    You cannot add or modify a Predefined Role in Trend Micro. Hence it is recommended to create a new custom role to use while creating an API Key.

  3. In the General Information section, specify a name for the custom role and add relevant description.

    Trend_micro_user_role_2_1.png

  4. Assign permissions to the custom role:

    1. In the Permissions section, navigate to Platform Capabilities > XDR Threat Investigation.

    2. Enable the following permissions:

      • In Workbench, select View Execution Profile and View, filter, and search permissions.

      • In Observed Attack Techniques, select View, filter, and search permissions.

    Trend_micro_user_role_4.png

  5. Click Save.

  6. In the Data and App Objects section, retain the default option Full Scope.

Create an API Key

After you create a custom user role, create the Trend Micro API key. This key is required to integrate with the Cloud Collectors service to enable the cloud collector to collect events.

  1. Log in to the Trend Vision One console with your registered credentials as an administrator.

  2. Navigate to Administration > API Keys.

  3. Click Add API Key.

    create_API_Key_1.png

  4. On the Add API Key page, enter the required information.

    create_API_Key_2.png

    • Name – Specify a name for the API key.

    • Role – Select the custom user role that you created specifically for integrating with Cloud Collectors.

    • Expiration Time – Select the duration of time for which you want the key to be active. For example, 1 year or 2 years. Based on your preference, you can select No expiration date for the key to work perpetually.

  5. Click Add. An API Key Value is automatically generated.

    API_key_3.png

  6. Record the API Key Value that you can paste in the Token field while creating a Trend Micro account in Cloud Collectors.

Create a Sharable Trend Micro Account

To set up a shareable account for Cisco Duo in Cloud Collectors:

  1. Log in to the Exabeam Security Operations Platform with your registered credentials as an administrator.

  2. Navigate to Collectors > Cloud Collectors.

  3. Click Accounts, then click New Account.

    Account1.png

  4. In the Add a New Account page, enter the required information.

    Trend_Mirco_Account.png

    • VENDOR – Select the vendor as Trend Micro.

    • NAME – Specify a name for the Trend Micro account.

    • SERVICE ENDPOINT – Select the region of Trend Vision One server where the service endpoint is hosted. For more information, see Regional Domains in the Trend Vision One documentation.

    • TOKEN – Paste the token that you obtained while creating an API Key.

  5. Click Save.

  6. Proceed to configure your Trend Vision One Cloud Collector.

    When you onboard new collectors for Trend Micro, you must select the Trend Micro account. You can reuse credentials between different Trend Micro cloud collectors.