Mac

Mac Client Prerequisites

Before deploying Endpoint Protection on Mac endpoints using ManageEngine, ensure that the following prerequisites are met:

• An administrator account with administrative privileges is available on the target Mac endpoints.
• Remote Management is enabled on all target Mac endpoints.
• The ManageEngine Agent is installed on the target Mac endpoints.
• The target Mac endpoints are enrolled in ManageEngine Endpoint Central.
• The Packages application is installed on the administrator system. This application is required to create installation bundles for deployment.

Additional Requirement for macOS Catalina and Later

For macOS Catalina and later versions, grant Full Disk Access to the Packages Dispatcher process:

1. Open System Preferences.

2. Navigate to Security & Privacy > Privacy.

3. Click the lock icon and authenticate, if required.

4. Select Full Disk Access.

5. Add the following process:

   /Library/PrivilegedHelperTools/fr.whitebox.packages/packages_dispatcher

6. Ensure that the process is enabled.

Preparing the Mac Installation Package

To prepare the Endpoint Protection installation package, follow these steps:

1. Log in to the Seqrite CSM Console.

2. Navigate to Deployment.

3. Download the Mac client package using either the Online Installer or Email Installer option.

   Note: The downloaded package is provided as SUAmac.zip.

4. Extract the downloaded package. The extracted folder contains:

   • SUA_macos.dmg
   • installaconfig.dat

5. Download the MACInstall.sh installation script from the designated CDN location.

6. Copy the MACInstall.sh file to the extracted SUAmac folder.

7. Create a ZIP archive containing:

   • SUA_macos.dmg
   • installaconfig.dat
   • MACInstall.sh

Deploying the Configuration Profile

Deploy the Seqrite configuration profile to silently load product extensions and grant the required permissions.

1. Log in to the ManageEngine Endpoint Central Console.

2. Navigate to Configuration > Mac > Custom Configuration.

3. Specify a name for the custom configuration.

4. Download the Seqrite Mac configuration profile.

5. Extract the downloaded profile package.

6. Select the extracted .mobileconfig file and upload it as the custom configuration profile.

   Note: This profile supports macOS Big Sur and later versions.

7. Define the target endpoints:

   • Select the required Remote Office or Domain.
   • Select the target Mac endpoints.

8. Click Deploy Immediately.

Deploying the Mac Client Using ManageEngine

1. Log in to the ManageEngine Endpoint Central Console.

2. Navigate to Software Deployment.

3. Click Add Package and select Mac.

4. Configure the package:

   • Package Name: Specify a package name.
   • License Type: Select Commercial.
   • Upload File: Upload the prepared SUAmac.zip package.

   Note: The package must contain the Mac installer, configuration file, and installation script.

5. Under Advanced Options, specify the installation command:

   ./MACInstall.sh

6. Click Add Package.

7. Navigate to:

   Deployment > Install/Uninstall Software > Mac > Computer Configuration

8. Specify a configuration name.

9. Select Install as the operation type.

10. From the Package Name list, select the package created earlier.

11. From the deployment policy options, select Deploy at any time at the earliest.

12. Define the target endpoints:

    • Select the required Remote Office or Domain.
    • Select the target Mac endpoints.

13. Click Deploy Immediately to start the deployment.

After the deployment is complete, verify that the Endpoint Protection client is successfully installed on the target Mac endpoints.