Issue:

How to deploy WithSecure Elements Agent (EPP for Computers or for Servers) using a clone image?

Resolution:

Follow the instructions here for installing the WithSecure Elements Agent using a clone image.

Issue:

How to deploy Elements EPP for Computers (Mac) using Intune?

Resolution:

You could follow the instructions below in order to deploy Elements EPP for Computer (Mac) using Intune to your Mac devices.

Note: Make sure that you have added your Mac devices to the Intune Company Portal before proceeding with this deployment. You may refer to the following Microsoft page for more details.

https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-your-device-in-intune-macos-cp

1. Login to Microsoft Intune admin center (https://intune.microsoft.com/#home)

2. Create a new group by following the steps below
    2.1.    Go to "Groups"
    2.2.    Click on "New Group"
    2.3.    Select "Security" for the Group Type
    2.4.    Enter the name of the group at "Group Name"
    2.5.    Leave other settings as default
    2.6.    Click on "No members selected" link
    2.7.    Search for your Mac devices
    2.8.    Put a tick to select all Mac devices
    2.9.    Click on "Select" button at the bottom
    2.10.  Click on "Create" button to proceed with new group creation

    Note: You may skip creating a new group if there is an existing group for your Mac devices on Intune portal.

3. Create a new profile to allow WithSecure system extensions and etc
    Note: It is recommended to create the configuration profiles within Intune rather than using a separate Preference file (*.plist).

     In case of WithSecure system extensions:
     – Refer to the following documentation for more details on how to create a new profile with system extension settings.

Importing MDM profiles with system extension settings | Elements Endpoint Protection | Latest | WithSecure User Guides

     In case of Content Filtering: 
     – Refer to the following documentation for more details on how to create a new profile with content filtering settings.

Creating MDM profiles with content filtering settings | Elements Endpoint Protection | Latest | WithSecure User Guides

     In case of Full Disk Access:
     – Refer to the following documentation for more details on how to create a new profile with full-disk access settings.

Creating MDM profiles with full-disk access settings | Elements Endpoint Protection | Latest | WithSecure User Guides

     In case of User Notifications:
     – Refer to the following documentation for more details on how to create a new profile with notification settings.

Creating MDM profiles with notification settings | Elements Endpoint Protection | Latest | WithSecure User Guides

4. Deploy Elements EPP for Computers (Mac) to your Mac devices
      4.1.    Go to "Apps"
      4.2.    Select "macOS" from the list of available platforms
      4.3.    Click on "Add" button
      4.4.    Select "Line-of-business app" for App type
      4.5.    Click on "Select" button at the bottom
      4.6.    Click on "Select app package file" link
      4.7.    Click on "Select a field" field
      4.8.    Search for the installer file (*.pkg) of Elements EPP for Computer (Mac)
                 Note: There is a need to change the file extension of the installer from *.mpkg to *.pkg so that it would be recognized by Intune.
      4.9.     Click on "OK" button
      4.10.   Enter Name, Description and Publisher (use "WithSecure" in this case) for App Information
      4.11.   Select "macOS Monterey 12.0" for the Minimum operating system 
      4.12.   For the Included apps, maintain just the below bundle IDs and remove the rest of the unnecessary items

                  Note: 3.0.53367 indicates a build version, it is recommended to always use the latest build version

       4.13.   Leave other setting as default and click on "Next" button
       4.14.   Under Required category, click on "Add group"
       4.15.   Select your group from the list and click "Select" button
       4.16.   Click on "Next" button
       4.17.   Click on "Create" button

Note: It may take some time before Elements EPP for Computers (Mac) is being deployed to your mac devices silently in the background.

Issue:

How to reset biometric key device registration in the Elements Security Center portal?  For example if a device or computer was reinstalled and the biometric keys for it need to be added again for faster two-factor authentication (2FA)

Resolution:

Here are the steps on how to reset the biometric keys for a device: 

1. Log in to the Elements Security Center portal: https://elements.withsecure.com
2. Select Try another method when asked to Use fingerprint or face recognition to login
3. After you have logged in, click on the profile icon in the top-right hand corner and select My settings
4. Click on the Change button on the right side of the Multi-Factor Authentication enabled text
5. In the Biometric keys section, click remove for the existing key
6. Enter your username and password

Next time you login with your device, after the multi-factor authentication (MFA) step, you will be again asked if you want to enable faster login on the device.

Issue:

How to exclude file extensions from WithSecure Elements EPP for Computers and for Servers Real-time scanning using the WithSecure Elements Endpoint Protection portal?

Resolution:

Follow these steps to create an Real-time scanning exclusion for specific file extensions: 

1. Log in to the Elements Endpoint Protection portal
2. Go to the Profiles page
3. Select the profile you want to edit
4. Go to the Real-time scanning settings
5. In the File scanning section, enable Exclude files with the following extensions
6. In the Excluded extensions, enter the file extensions in format ABC instead of .ABC (use space between extensions if you enter multiple)
7. Click Save and Publish

Issue:

How to create a Connection Control exclusion, so that a URL or website address will not be blocked by Elements Endpoint Protection (EPP for Computers or EPP for Servers) Connection Control feature?

Resolution:

The site needs to be added to the allowed sites list, so that the user can continue to the website even if it would be blocked by the Connection Control feature. 

You can add the website URL address to the allowed sites list in the profile used be the devices by following these steps:

1. Log in to the Elements Security Center: https://elements.withsecure.com
2. Open the Security Configurations section from the menu on the left
3. Go to the Profiles page
4. Click on the profile you want to edit
5. Go to the Browsing Protection settings page
6. Scroll down to the Web site exceptions section and enable it
7. In the Allowed sites section, click Add sites
8. Enter the site address which you want to allow
9. Click Save profile

Once the profile has been saved and published, all devices using the profile will be able to go to the allowed site even if Connection Control is activated.

Note: there is no setting for stopping Connection Control from activating on a web site that has been marked as a banking site. with the Connection control sites setting you can only make Connection Control activate on non-banking sites. 

Issue:

How to create a Real-Time Scanning or DeepGuard exclusion for a file or folder for Elements Endpoint Protection (EPP for Computers or EPP for Servers) when the SHA-1 of the application changes with each update?

Resolution:

You can exclude a file or folder from all security measures by following these steps:

1. Log in to the Elements Security Center: https://elements.withsecure.com
2. Navigate to the Security configurations > Profiles page
3. Choose the profile which the device is using
4. Go to the Scanning settings page
5. Scroll down to the Global exclusions from all security scans section and click Add exclusion
6. In the Path field add the:
   • Full path for the application if you want to exclude a specific application
   • Folder path if you want to exclude a folder and its sub folders
7. Click Save

Note that you can use wildcards when creating the exclusions:
For example: C:\Users\*\AppData\Local\test\ 

This would exclude the AppData\Local\test\ folder and all its sub folders for all users.

If you want to locally on the device itself create the exclusion:

1. Open the Elements Agent user interface on the device
2. Go to Settings 
3. Go to the Malware protection settings page
4. Click view quarantine (enter administrator username and password if needed)
5. Select the Excluded tab
6. Click Add new 
7. Add the file path or folder path
8. Click OK

DeepGuard can also be excluded using the SHA-1 of the process:

1. Log in to the Elements Endpoint Protection portal 
2. Go to the Security events page
3. Click on the three dots on the right side of the DeepGuard detection
4. Select Exclude file by SHA1 
   • The file SHA1 is automatically added to the Exclude folders and files from all security scans list
5. Click Save and publish

Issue:

When the Tamper Protection (Resource protection) feature enabled on a device,  how can the Elements Agent be uninstalled if Tamper Protection is blocking the uninstallation using uninstallation tool and a local user is not allowed to use the Windows apps and features function to uninstall Elements Agent?

Resolution:

The WithSecure uninstallation tool will not run if Tamper Protection feature is enabled. If Tamper Protection is enabled from the Elements profile and local uninstallation is not allowed, you must modify the Elements profile so that local uninstallation is allowed and tamper protection is not enabled. 

To disable Tamper Protection, follow these steps:

1. Log in to the Elements portal: https://elements.withsecure.com
2. Navigate to the Security Configurations > Profiles page
3. Click on the profile that is in use on the device
4. Go to the Scanning settings page
5. Scroll down to the Tamper Protection section 
6. Disable Turn on Tamper Protection
7. Click Save profile

To allow local uninstallation with admin rights, follow these steps: 

1. Log in to the Elements portal: https://elements.withsecure.com
2. Navigate to the Security Configurations > Profiles page
3. Click on the profile that is in use on the device
4. Go to the General settings page
5. Scroll down to the Security features section
6. Enable Allow user to uninstall the product
7. Click Save profile

If you are unable to change the profile settings for the device, you can as a last resort boot the computer to Windows Safe Mode with Networking and run the WithSecure Uninstallation Tool there. 

Issue:

How to renew an WithSecure Elements Endpoint Protection and Business Suite subscription?

• Elements EPP for Computers
• Elements EPP for Servers
• Elements EDR for Computers
• Elements EDR for Servers
• Elements EPP for Mobiles (Mobile Protection)
• Client Security
• Server Security
• Atlant
• Elements Vulnerability Management

Resolution:

If you are an end-customer and have a question related to corporate product renewal, modification or cancellation, contact your WithSecure reseller. An WithSecure reseller partner can renew, modify and cancel Elements subscriptions. 

If you are a reseller partner and you need sales-related help, you can be in touch with your WithSecure Sales contact. In the event you are unable to reach them, you can email WithSecure Order Services directly or submit a support request through the Partner Portal.

If you want to change WithSecure partners, you can find a new partner using this list: 
https://www.withsecure.com/en/partners/find-a-partner

Issue:

I as an WithSecure Solution provider (SOP) do not know where or how to upload my company logo for my WithSecure Elements customers. I want to have my company logo visible on the Elements Endpoint Protection portal and on the Elements Agent. 

Resolution:

You can customize the WithSecure Elements portal with your logo and support link.

To customize the management portal:

1. Log in to the Elements portal: https://elements.withsecure.com
2. Under Management, select Organization Settings from the sidebar
3. Select the Endpoint Protection Accounts tab
4. Select the triple dots icon, and then select Customize portal
5. In the Support URL field, enter the URL of your support site

Note: The link that you provide replaces the default WithSecure support link

6. Upload your logo by dragging and dropping it to the Portal and summary report logo box

Note: Your logo must be in the .png format. The required dimensions of the logo are 60 x 60 pixels.

7. Save your changes

Once customized, the portal shows your logo at the bottom left corner. Visit this guide pages for more information:

Customize own company logo on Elements Endpoint Protection portal
https://www.withsecure.com/userguides/product.html#business/psb-portal/latest/en/task_8F3AAD71B68E4CF69FD5470CD301D281-psb-portal-latest-en

Customize WithSecure Elements Agent logo
https://www.withsecure.com/userguides/product.html#business/psb-portal/latest/en/task_A4FF2737811E43418774A4656B0DC1B7-psb-portal-latest-en

Issue:

How to enable or disable Tamper Protection feature for Elements Endpoint Protection?

Resolution:

How to enable or disable Tamper Protection completely: 

1. Log in to the Elements Security Center Portal 
2. Go to the Security Configurations on the left menu
3. Go to the Profiles page
4. Click on the profile you want to edit
5. Go to the Scanning settings page
6. Scroll down to the Tamper protection section
7. Enable or disable "Turn on Tamper Protection"
8. Click Save profile

Tamper Protection (resource protection) can also be temporarily disabled for one device by using an operation:

1. Log in to the Elements Security Center portal
2. Go to the Environment on the left menu
3. Go to the Devices page
4. Select the device (a menu will appear) 
5. Click Turn off security features 
6. Select Turn off resource protection
7. Select the time 
8. Click Turn off