Skip to main content

Connect Trend Micro Vision One to Anzenna

Connect your Trend Micro Vision One tenant to Anzenna to monitor Workbench alerts and endpoint inventory. The integration uses an API key issued from the Vision One console — no OAuth redirect.

Prerequisites​

Step-by-Step Instructions​

Part 1: Create a Custom Role for Anzenna​

Trend Micro requires API keys to be assigned a role. We'll create a dedicated Anzenna role with the minimum permissions Anzenna needs, then assign it to the API key in Part 2.

  1. Sign in to the Trend Micro Vision One console as an administrator.

  2. Click your account menu in the top-right corner and select User Roles.

Open the account menu and click User Roles

  1. On the User Roles page, click Add role.

Click Add role on the User Roles page

  1. On the General information tab, set the Role name to Anzenna.

  2. Under Control flags, set Can be assigned to API keys to Yes. Leave Can be assigned to user accounts set to No .

  3. Optionally enter a Role description such as Role for Anzenna API access.

Fill in the General information tab for the Anzenna role

  1. Switch to the Permissions tab. Under Platform Capabilities, leave the top-level apps (Companion, Cyber Risk Exposure Management, Dashboards & Reports, Agentic SIEM & XDR, Threat Intelligence) at No access, then expand Workflow and Automation and grant the permissions Anzenna needs for Case Management, Security Playbooks, and Response Management.

Configure Platform Capabilities and Workflow and Automation permissions

  1. Continue scrolling and expand Endpoint Security > Endpoint Inventory. Grant View on Endpoint Inventory and on the sensor / proxy settings so Anzenna can read endpoint data. Leave Endpoint Security Configuration at No access.

Grant view permissions under Endpoint Security > Endpoint Inventory

  1. Click Save to create the role.

tip

Start with the minimum read permissions shown above. If you later enable Anzenna remediation actions for Trend Micro, return to this role and grant the additional write permissions then.

Part 2: Create an API Key with the Anzenna Role​

  1. In the Vision One console, navigate to Administration > User Accounts & Roles > API Keys .

  2. Click Add API Key.

Click Add API Key on the API Keys page

  1. Set the Name to Anzenna.

  2. Set the Role to the Anzenna role you created in Part 1.

  3. Set the Expiration Time to the longest interval your security policy allows (for example, 15 years) — rotating the key is a manual operation.

  4. Optionally enter a Description such as Anzenna API Key, leave Status set to Enabled, then click Add.

Fill in the Add API Key form (Name, Role, Expiration, Status)

  1. When the API Key Value is shown, click the copy icon and store the value somewhere temporary — you'll paste it into Anzenna in Part 4.

Copy the API Key Value from Vision One
warning

The API key value is only displayed once, immediately after creation. If you close this dialog without copying it, you will have to delete the key and create a new one.

Part 3: Identify Your Regional API URL​

  1. In the Vision One console URL, note the region embedded in the host name (for example, portal.xdr.trendmicro.com is the US region; portal.eu.xdr.trendmicro.com is the EU region).

  2. Map the console region to the matching API URL using the table below.

tip

If you are unsure which API URL applies, check Administration > API Keys in the Vision One console — the page header generally cites the regional API endpoint to use.

Part 4: Connect Trend Micro in Anzenna​

  1. Sign in to app.anzenna.ai.

  2. Go to Settings > Integrations and find Trend Micro.

  3. Click the toggle to begin the connection.

  4. Paste your regional API URL into the API URL field.

  5. Paste the API key you copied from Vision One into the API Key field.

  6. Click Save.

Paste the API URL and API Key in the Connect Trend Micro dialog

Part 5: Verify the Connection​

  1. Wait a few seconds, then refresh the Integrations page.

  2. Confirm that the Trend Micro card shows a Connected to ... status and a green toggle.

Trend Micro shows as Connected in Anzenna
success

Trend Micro Vision One is now connected to Anzenna. Anzenna will begin pulling Workbench alerts and endpoint inventory from your tenant.