Trend Micro Deep Security Anti-malware Driver Offline Not Installed

The failure to install the Anti-Malware driver (kernel module) is usually caused by one of the following factors:

Once you resolve the “Anti-Malware Driver Offline Not Installed” error, implement these best practices:

Open a case if:

Provide them with:

Note: As of 2025–2026, Trend Micro has been migrating Deep Security capabilities into Vision One Workload Security. If you are on a very old version (e.g., Deep Security 12 or earlier), upgrading to a supported release may resolve persistent driver issues. The failure to install the Anti-Malware driver (kernel

The "Anti-Malware Driver Offline/Not Installed" status in Trend Micro Deep Security indicates the agent is unable to communicate with its local anti-malware module or the driver itself is missing/failed TrendMicro Common Causes Installation Corruption

: The initial installation was incomplete or files became corrupted. Certificate Issues

: Missing root certificates on Windows prevent digital signature verification for the driver. A specific conflict with Comodo certificates is also a known trigger. Security Conflicts

: Existing third-party antivirus software or older Trend Micro products (like OfficeScan) can block driver installation. Environment Features Once you resolve the “Anti-Malware Driver Offline Not

: Secure Boot being enabled without the proper public key enrolled can block the driver from loading. VM Sleep States

: If a virtual machine enters standby or sleep mode, communication with the driver may be lost. TrendMicro Troubleshooting and Solutions 1. Basic Service and Status Checks Restart Services

: Attempt to restart the Trend Micro Deep Security Agent service first. For Linux, use sudo /etc/init.d/ds_agent restart Check Policies

: In the Deep Security Manager, verify that the Anti-Malware policy is actually turned for that specific computer. www.trendmicro.com Provide them with:

Anti-Malware: Driver offline / Not installed - Deep Security

sc query ds_driver

Or look in:

C:\Program Files\Trend Micro\Deep Security Agent\

Check for .sys files in drivers subfolder.

Before troubleshooting, it is crucial to understand the architecture.