Configuring the Client Machine

You can configure the Client Machine (the Golden Image) manually or with a script.
  1. Disable the Anti-Malware Periodic Scan. See the instructions above.
  2. In Windows Registry, configure the value 0x01 for the key AVBasesScheme (to enable the "Shared Signatures" scheme).

    • On 64-bit operating system:

      HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CheckPoint\Endpoint Security\Anti-Malware\AVBasesScheme=(DWORD)0x01

    • On 32-bit operating system:

      HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\Endpoint Security\Anti-Malware\AVBasesScheme=(DWORD)0x01
  3. In Windows Registry, configure the path to the shared signatures folder in the key AVSharedBases.

    • On 64-bit operating system:

      HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CheckPoint\Endpoint Security\Anti-Malware\AVSharedBases=(SZ)"\\Server\FolderWithSharedSignatures"

    • On 32-bit operating system:

      HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\Endpoint Security\Anti-Malware\AVSharedBases=(SZ)"\\Server\FolderWithSharedSignatures"

    Notes:

    • If you do not configure the path, then the default shared folder is:

      C:\ProgramData\CheckPoint\EndpointSecurity\Anti-Malware\bases\shared

    • The default shared folder exists after the first successful update.

  4. Reboot the machine or restart the Anti-Malware process.