Edit the registered Endpoint Security (HX) server in ePO - On-prem

You can edit the configuration details of a registered Endpoint Security (HX) server directly in Trellix ePO without deleting and re-adding the server instance. This applies to both ePO - On-prem and ePO - SaaS.

Use one of the following methods to edit the HX server:

• Update the HX server name  

• Update the HX server name and URL in Automatic Mode

• Update the HX server name and URL in Manual Mode

Update the HX server name

1. Go to Menu > ePO Server Settings.

2. On the HX Instance Management page, select the target HX server, and click Edit in the bottom-right corner.

3. Click Actions in the bottom-left corner and select Edit HX Instance.

4. In the Edit HX Instance configuration window, update the HX Server Name.

5. Click Save.

Update the HX server name and URL in Automatic mode

1. Perform the steps 1–3.

2. In the Edit HX Instance configuration window, update the HX Server Name and HX Server URL.

   • Note: Use the Fully Qualified Domain Name (FQDN) format for the URL. For example, https://servername:port/.

3. Click Show Cert.

4. Compare and validate that the certificate fingerprint displayed in ePO matches your HX server's actual certificate fingerprint.

5. Select the Confirm the HX certificate is valid checkbox.

6. (Optional) Update the HX server administrator credentials if required.

7. Click Get HX Config to download the HX server configuration file to your endpoint.

8. Click OK, and then click Save.

Update the HX server name and URL in Manual mode

1. Perform the steps 1–3.

2. In the Edit HX Instance configuration window, update the HX Server Name and HX Server URL fields.

3. Enable the Manually add HX Instance toggle.

4. Paste the valid HX server JSON snippet in the text field.

   To get the server configuration JSON, run this curl command:

   curl --proxy <proxy server> -s -k GET "https://HOST:PORT/hx/api/v3/server_info" -H "accept: application/json" -i --user username:password
   
   For example:
   curl --proxy proxy.internal.corp:8080 -s -k GET "https://[2001:db8:a0b:12f0::1]:3000/hx/api/v3/server_info" -H "accept: application/json" -i --user api_user:P@ssw0rd3xampl3!
   

   Note

   If you use a cloud HX server, run the command without the port number.

5. Click OK, and then click Save.

Verify the updated HX server details 

After you modify the HX server details, perform these verification steps:

1. Verify the HX server summary:
   
   On the HX Instance Management page, confirm that the updated HX server name (and URL, if modified) appears correctly in the summary section for the instance.
   

2. Verify Policy Catalog Assignment:
   

   • Go to Menu  Policy  Policy Catalog.

   • Select Trellix EDR with Forensics from the Product list.

   • Expand the General policy category and click Edit for the applicable policy.

   • Click Show Advanced and navigate to the Forensics (HX) Server section.

   • In the Registered Forensics (HX) servers drop-down list, confirm that the updated server instance name is selected and active.

   • Click Save.