Software deployment guidance and common product recipes for macOS

Which method should I use to deploy software?

  • Where possible, Apple's Volume Purchase Program and deliver device-based licenses from the Mac App Store.
    • This allows you to push mac apps directly from the Apple Content Delivery Network without requiring an Apple ID (device-based licensed VPP). 
    • These apps can also be cached on an Apple macOS Server with "caching" enabled to help reduce WAN traffic.
  • For a non-store app, if the *.dmg or *.pkg file ONLY delivers an app (*.app folder) for "drag and drop" installation functionality, compress the *.app folder into a zip and deliver via the Internal Apps tab in the AirWatch console.
  • For complex non-app store applications (MS Office, Adobe Creative Suite, scripts, etc), you must leverage the Products engine (under Devices > Staging & Provisioning).
    • Generally, we suggest delivering large complex application installs from a local file share (e.g. copy the files from a local file share before executing them) or a web server.
    • There are some publicly-available scripts that allow you to deliver large packages directly from the hosting CDN (e.g. Microsoft Office installers hosted directly by Microsoft -- see here).

 

Common Product Provisioning Recipes

Various teams in VMWare are periodically asked whether AirWatch can install certain software packages on a Mac.  This article will be updated periodically with additional complex app configurations using the Product Provisioning engine as they are requested and validated.   Note that there may be multiple ways to install an application and we have only included the requested method in the list below. 

NOTE:  You can also find additional guidance on best practices for the Products Engine in the Knowledge base.

 

Microsoft Office 2016

We will be publishing an in-depth tech note detailing an example use-case for deploying Microsoft Office 2016 for Mac.  The tech note covers the use of Custom XML, Custom Attributes, Files and Actions, and Products.   Please review this tech note for a comprehensive walk through on the various parts comprising a Product.  This will help you understand the individual items detailed below for the other common products.

 

Adobe Reader DC

  • Files:
    • Upload the Acrobat DC Installer.pkg file and set to download to /tmp/Acrobat DC Installer.pkg
  • Install Manifest:
    • Action Type - Install: /tmp/Acrobat DC Installer.pkg
  • Uninstall Manifest:
    1. Action Type - Run:  rm -rf /Applications/Adobe\ Acrobat\ Reader\ DC.app/
    2. Action Type - Run:  rm -rf /Library/Application\ Support/Adobe/Reader/
    3. Action Type - Run:  rm -rf /Library/Application\ Support/Internet\ Plug-Ins/AdobePDFViewer.plugin/
    4. Action Type - Run:  rm -rf /Library/Application\ Support/Internet\ Plug-Ins/AdobePDFViewerNPAPI.plugin/

 

Apple Enterprise Connect:

  • Files:
    • Upload the Enterprise Connect 1.6.3.pkg file and set to download to /tmp/Enterprise Connect 1.6.3.pkg
  • Install Manifest:
    • Action Type - Install:  /tmp/Enterprise Connect 1.6.3.pkg
  • Uninstall Manifest:
    • Action Type - Uninstall:   /Applications/Enterprise Connect.app

 

McAfee Endpoint Protection:

  • Files:
    • Upload the install.sh and set it to download to /tmp/install.sh
  • Install Manifest:
    1. Run Command: chmod +x /tmp/install.sh
    2. Run Command: sudo /tmp/install.sh -i > /dev/null 2>&1
  • Uninstall Manifest:
    • Action Type - Run:   sudo /Library/McAfee/cma/scripts/uninstall.sh

 

Microsoft Skype For Business:

  • Files:
    • Upload the SkypeForBusinessInstaller-16.1.0.456.pkg file and set to download to /tmp/SkypeForBusinessInstaller-16.1.0.456.pkg
  • Install Manifest:
    • Action Type - Install:  /tmp/SkypeForBusinessInstaller-16.1.0.456.pkg

 

Palo Alto GlobalProtect:

  • Files:
    • Upload the GlobalProtect-3.1.3.pkg and set it to download to /tmp/GlobalProtect-3.1.3.pkg
  • Install Manifest:
    • Install: /tmp/GlobalProtect-3.1.3.pkg
  • Uninstall Manifest:
    • Action Type - Run:   sudo /bin/bash /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh

 

RSA SecureID:

  • Files:
    • Upload the RSASecurIDTokenAutoMac412x64.pkg and set it to download to /tmp/RSASecurIDTokenAutoMac412x64.pkg
  • Install Manifest:
    • Install: /tmp/RSASecurIDTokenAutoMac412x64.pkg
  • Uninstall Manifest:
    • Action Type - Run:   sudo /usr/bin/python /Library/Application\ Support/SecurID/uninstall-rsasecurid.py &>/dev/null

 

Sophos Antivirus:

  • Files:
    • Upload the SophosInstall-Mac.zip and set it to download to /tmp/SophosInstall-Mac.zip
  • Install Manifest:
    1. Install: /tmp/SophosInstall-Mac.zip
    2. Run Command: chmod a+x /tmp/TEMPDIR-SophosInstall-Mac\Sophos\ Installer.app/Contents/MacOS/Sophos\ Installer
    3. Run Command: chmod a+x /tmp/TEMPDIR-SophosInstall-Mac\Sophos\ Installer.app/Contents/MacOS/tools/com.sophos.bootstrap.helper
    4. Run Command: /tmp/TEMPDIR-SophosInstall-Mac\Sophos\ Installer.app/Contents/MacOS/Sophos\ Installer --install > /dev/null 2>&1

 

Symantec Removal Tool:

  • Files: 
    1. Unpack the SymantecRemovalTool.zip.
    2. Upload the SymantecRemovalTool.command and set it to download to /tmp/SymantecRemovalTool.command
  • Install Manifest:
    1. Action Type - Run:  chmod a+x /tmp/SymantecRemovalTool.command
    2. Action Type - Run:   sudo /tmp/SymantecRemovalTool.command > /dev/null 2>&1
Have more questions? Submit a request

0 Comments

Article is closed for comments.