Distributing virus definitions to Symantec AntiVirus for Macintosh clients from the Symantec Administration Console

Article:TECH103233  |  Created: 2007-01-30  |  Updated: 2009-01-12  |  Article URL http://www.symantec.com/docs/TECH103233
Article Type
Technical Solution


You want to distribute the latest virus definitions to all your managed Symantec AntiVirus for Macintosh clients without having to run LiveUpdate on each individual client computer.


Using the Install Software command in the Symantec Administration Console, you can distribute and install the latest virus definitions using an Intelligent Updater.

Before running the Install Software command in the Symantec Administration Console for Macintosh, you must use the command line program, SymInstallPackage, to create a proper package that will contain the software and additional files. For more information about SymInstallPackage, read SymInstallPackage Reference.

Summary Overview
  1. Download the latest virus definitions from the Security Response website.
  2. Extract the Intelligent Updater installer by double clicking on the archive file.
  3. Copy the Intelligent Updater to a temporary folder on the hard drive.
  4. Run the SymInstallPackage command line program to create an Installer Package.
  5. Use the Install Software command in the Symantec Administration Console.
  6. Specify the URL of the package you created in step 4 and click Command.

To download the virus definition installer for Symantec AntiVirus for Macintosh
  1. From the Symantec Administration Console server, go to the Security Response Macintosh Virus Definitions page.
  2. Find for the section for your version of Symantec AntiVirus for Macintosh. There are two different Intelligent Updater ZIP files:
    - NavM_Intel_Installer....zip is intended for use with Symantec AntiVirus for Macintosh 10.2 (Intel processor).
    - NavM9_Installer....zip is intended for use with Symantec AntiVirus for Macintosh 10.2 (PowerPC processor), or Symantec AntiVirus for Macintosh 10.1 or 10.0 (PowerPC or Intel Processor).
  3. Click the file name or on "FTP" to the right of the file name to start the download.
    Example: NavM_Intel_Installer_20090108_US.zip
  4. Go to where you downloaded the updater and double-click the file to uncompress the ZIP archive.
  5. The resulting file an installer package. The file name is in the format SymantecAVDefs_*.pkg.
    Example: SymantecAVDefs_Intel.pkg or SymantecAVDefs_ppc.pkg
  6. Copy the installer package to a central location, such as /Shared Items/Public/
  7. Open Terminal.
  8. Type the following to change to the Symantec Administration Console for Macintosh Tools directory:
    cd "/Library/Application Support/Symantec/SMac/Tools"
  9. Press Return.
  10. In Terminal, type the following to create an installer package for use by the Symantec Administration Console server (do not include the brackets):

    sudo ./syminstallpackage --installer=[location of candidate .pkg file] --target=[typically the root of the target client which is "/"] --wrappername=[destination and name of installer package] --keyid=[usually "1" unless a different key is required]

    Note: File names referenced in "installer" or "wrapper" cannot contain spaces, but the paths to those files can contain spaces as long as the path is enclosed in quotes.

    sudo ./syminstallpackage --installer="/Shared Items/Public/SymantecAVDefs_Intel.pkg" --target=/ --wrappername="/Library/WebServer/Documents/AVDefs20090108.pkg.tgz" --keyid=1
  11. Press Return.
  12. Type your administrator password.
    Note: No characters appear.
  13. Press Return.
  14. Type your KeyID password.
    Note: There is no prompt for you to enter the KeyID password. It pauses here and waits for you to enter it.
  15. Press Return.
  16. Exit Terminal.

Running the Install Software command*
  1. On the Send Commands page, select one or more clients or groups to receive the command.
  2. Under Send Command Options, select Send command to all clients or Send command to clients or groups checked above.
  3. On the Command pop-up menu, click Install Software.
  4. Click Specify Parameters
  5. On the Install Software page, specify the following.
    • Command Label: The name that you assign to your command. The name appears in the Command log after you issue the command.
    • Command Expires: The time period in which the command is active. Enter a number, and then specify the period in days, weeks, or months.
    • Command Key ID: The integer by which the public key is identified at both the server and the client.
    • Key Password: The password that corresponds to your Key ID.
    • Install Package URL: An FTP or HTTP address from which the client downloads the desired Install Package.

*Example Scenario (Running the Install Software command):
On the Send Commands page, four clients are check marked.
From the Command pop-up menu, Install Software is clicked and Specify Parameters is clicked.
On the Install Software page, the following is specified:

    Command Label: IU VDefs Update
    Command Expires: 5 Days
    Command Key ID: 1
    Key Password: ********
    Install Package URL: http ://
When these are all filled in correctly, click Command.

Technical Information
The Intelligent Updater installers are also intended for use with the Norton consumer line, but consumer installations cannot be fully managed by the SACM.

Legacy ID


Article URL http://www.symantec.com/docs/TECH103233

Terms of use for this information are found in Legal Notices