Trellix File and Removable Media Protection 5.6.0 release includes new features and resolved issues.
This release includes all features and fixes from the previous release. We recommend that you always upgrade to the most current update.
Trellix FRP release details
For details about release dates and build numbers, see the Trellix FRP product release information section in KB81149.
For best practices before installation, see the Trellix FRP 5.6.x Installation Guide.
Rating
The rating defines the urgency for installing this update.
Recommended
This release is recommended for all environments. Apply this update at the earliest convenience.
Product compatibility
This release supports:
Trellix ePolicy Orchestrator - On-premises — 5.10.x.
Trellix Agent — 5.8.0 or later.
Upgrade support
For complete system requirements, see supported platforms for Trellix FRP in KB81149.
New features and changes
This release includes support for the following enhancements and changes:
Automatically protect against insider threats and tampering with out-of-the-box SysCore Self-Protection capabilities — By default, Self-Protection will be installed and enabled, ensuring only trusted modules are loaded into Trellix FRP processes, and only authorized modifications can be made to Trellix FRP binaries, configuration files, caches and registry.
The Self Protection feature can be configured using the Product settings policy page's General tab. For more information on Self-Protection configuration, see the Trellix FRP 5.6.x Interface Reference Guide and to disable Self-Protection during deployment, see the Trellix FRP 5.6.x Installation Guide.
To monitor or troubleshoot Self-Protection deployment on ePO clients, use FRP Self-Protection Events query from ePO Queries & Reports.
Microsoft Entra ID integration for Trellix FRP policies and keys — This release introduces support for Microsoft Entra ID (formerly Azure AD) for Windows clients. With Entra ID integration a consistent experience is provided for Active Directory and Entra ID users and devices, including:
Enforcement of User-based and System based ePO Policy Assignment Rules.
Trellix FRP Key assignments to Entra ID users is supported only for operating system and password token.
Trellix FRP Key assignment to clients.
Before assigning Trellix FRP keys to Entra ID users, follow the steps in article 000015151 to avoid issues with user synchronization.
Note
Only internal member users are currently supported on Entra joined devices. Hybrid and migrated identities for devices or users are not supported.
For more information on the configuration steps, see Register Microsoft Entra tenant with Trellix ePO - On-prem in the Trellix FRP 5.6.x Product Guide.
Resolved issues
This release resolves known issues.
Category | Reference | Resolution |
|---|---|---|
User Interface | FRP-4821 | Improved the clarity of the password prompt during user local key import and export. The User Interface now correctly displays the required password type, resolving an issue where the prompt appeared without specific instructions. |
Fixes to features | FRP-7773 | Trellix FRP no longer blocks kernel crash dump generation, even when drives are encrypted with Drive Encryption or BitLocker. |
Fixes to features | FRP-9759 | FRP keys can now be assigned to a system by any ePO user with System Tree access, not only users with root-level permissions. |
Fixes to features | FRP-11303 | Fixed an issue where bulk import or export of Trellix FRP keys failed when the key count exceeded the limit of 230. |
User Interface | FRP-11314 | When an unassigned smart card is used for FRP logon, smart card authentication now displays an explicit error message The smart card does not match the logged-in user. |
User Interface | FRP-11316 | When a user selects Forgot PIN during smart card PKI logon, the smart card token recovery prompt now displays the complete string Password for Smartcard Recovery. |
Known issues
For known issues, see Trellix File and Removable Media Protection 5.x known issues (KB85807).