How to set up Macintosh clients to download updates from an internal LiveUpdate server

Article:TECH103249  |  Created: 2007-01-30  |  Updated: 2011-06-22  |  Article URL
Article Type
Technical Solution


You would like to set up Macintosh clients to download updates from the internal LiveUpdate server, due to network bandwidth or proxy issues.



SAV for Macintosh clients can update from an internal LiveUpdate server that is installed either on a Mac (LiveUpdate Administration Utility 2.x for Macintosh, LUAU 2.x) or on a Windows computer (LiveUpdate Administrator 2.x or the legacy LiveUpdate Administration Utility 1.x) in the network.

Please note: LUAU 2.x is designed to update SAV 10 for Mac and earlier clients.  It cannot download and distribute updates for Symantec Endpoint Protection for Macintosh (SEP for Mac).

LiveUpdate Administrator 2.x (LUA 2.x) can download and distribute updates needed by both SAV for Mac and SEP for Mac. 


For Symantec Endpoint Protection for Macintosh (SEP for Mac) clients that are managed by a Symantec Endpoint Protection Manager (SEPM):

  1. Within the SEPM, choose Policies in the left pane.
  2. Under View Policies, highlight LiveUpdate.
  3. Either edit the preexisting LiveUpdate policy assigned to the group to which your Macintosh clients belong, or create a new policy under Tasks > Add a LiveUpdate Settings Policy..., to be assigned after the policy is saved.
  4. In the new window that appears, click on Server Settings.
  5. Ensure that Use a LiveUpdate server is checked, then select the button next to Use a specified internal LiveUpdate server, then choose Add....
  6. Fill in the required information. The URL must appear as an HTTP or FTP path, not the local or network path to the folder on your LiveUpdate Server. If a username and password is required for access, then provide that too; otherwise leave that blank.
  7. Click OK, then OK again to save the changes. If this is a new policy, you will be asked to assign the policy to a group; click on Yes, then assign it to the group containing the Macintosh clients.
  8. Macintosh clients will get the updated policy depending on communication settings and frequency of heartbeat. You can view the Policy Serial Number by looking under the QuickMenu, under Management.

For Symantec Antivirus for Macintosh (SAV for Mac) clients that are managed by a Symantec Administration Console for Macintosh (SACM):

Create a LiveUpdate Preference Set:

  1. In the Symantec Administration Console for Macintosh interface, on the Client Preferences page, click Create "LiveUpdate" Preference Set.
  2. Type the Key Password.
  3. Type a name for the Preference Set.
  4. Under Protocol, click HTTP or FTP.
  5. In Host Name, type the fully qualified domain name or IP address of the server, including the path to the definitions. For example, "".
  6. Type your Logon name and Password if required. Note that for anonymous FTP, the logon name is "anonymous" and the password can be anything.
  7. Click Save Preference Set.

Send LiveUpdate Preference Set to clients:

  1. Open Symantec Administration Console for Macintosh.
  2. Click Send Commands.
  3. Choose the clients or groups that you want to send the new preferences to.
  4. Under Send Command Options, click Send command to all clients or Send command to clients and groups checked above.
  5. Next to Command, choose Set Symantec Product Preferences.
  6. Click Specify Preferences.
  7. Type a Command Label.
  8. Type a number for a Command Expire time.
  9. Type the Key Password.
  10. Next to Preference Set, choose the LiveUpdate Preference Set that you created in the previous section.
  11. Click Command.

For unmanaged SAV for Mac clients:

If the internal LiveUpdate server is being hosted on a Macintosh:

LiveUpdate Administration Utility 2.x (LUAU 2.x) can generate a Terminal script (in the form of a .command file) to place the information for you automatically. It is strongly recommended you upgrade to 2.2.1. This can be done from the Main Menu of LUAU (5 - Uninstall or update...).

  1. Log in to LiveUpdate Administration Utility 2.x (LUAU 2.x). Authenticate with your password when prompted.
  2. From the main menu, choose 6 (More Options), then 1 (Set up Liveupdate Client Configuration Tool).
  3. Choose 1 (Modify host URL) to change the address to your local LU server. It will be an HTTP or an FTP URL, not the local path to the updates folder. For example,, not /Library/WebServer/Documents/updates.
  4. If a login name and password is required to access this URL, enter them under options 2 and 3, respectively.
  5. To create the PointLUtoInternalServer.command file, choose 5. It will be placed in /Applications/LiveUpdateAdminUtility/Tools. Note: should you decide to revert to Symantec LiveUpdate settings, another Terminal script is provided to do so, called PointLUtoSymantecServers.command.
  6. Copy PointLUtoInternalServer.command to the client machine, double-click on it, and authenticate with your password when prompted. This will put the configuration file in place.

If the internal LiveUpdate server is being hosted on a Windows computer:

  1. Log in to the client computer as root.
  2. Show hidden and system files. Please see Technical Information for guidance on how to do this.
  3. Navigate to /etc.
  4. Locate liveupdate.conf.
  5. Control-click and choose Duplicate to make a backup copy of the original file. You can also select the file and use the Command-D keyboard shortcut to duplicate the file.
  6. Double-click the original file to open it with TextEdit or the text editor of your choice.
  7. Modify the value next to hosts/0/url to reflect the address (fully qualified domain name or IP address) of the machine where your internal LiveUpdate updates are kept. For example, if you chose your LiveUpdate downloads to be saved to a folder in /Library/Webserver/Documents/LiveUpdate:


    Note: This must be in the form of an FTP or HTTP URL. The local path to the file will not work.
  8. The additional lines signifying additional LiveUpdate servers (hosts/[number]/URL) can either be commented out with a # or deleted altogether; otherwise, clients will roll to the other server locations if your internal LiveUpdate server (the first on the list) is not available.
  9. When finished, save your changes and exit.
  10. Log out of the root account.

The next time LiveUpdate is run, it will look to your internal LiveUpdate server for updates.

Please note that LiveUpdate Administrator 2.x (LUA 2.x) on Windows can export a liveupdt.hst file which can be used to update the Java LiveUpdate (JLU) used by SAV for Mac and SEP for Mac.  Details can be found in the administration guide.

Title: How to create and distribute a custom LiveUpdate preference set that supports multiple LiveUpdate servers  (SAV for Mac)

Technical Information
Note: This information is provided for your convenience only and is not supported by Symantec.

Showing hidden and system files can be accomplished via the Terminal using the following command:

defaults write AppleShowAllFiles YES

After relaunching the Finder (hold down the Option key, click and hold down the mouse button on the Finder icon in the Dock, then choose "Relaunch" from the contextual menu that appears), those files and folders previously hidden will show. All icons may appear to be dimmed.

To hide hidden and system files again, repeat the same command, substituting YES with NO, then relaunch the Finder again.

Alternately, third party utilities such as TinkerTool can be used to change this setting via a graphical user interface. Exercise caution when dealing with hidden files, as removing or renaming important hidden files may cause other applications or the operating system itself to malfunction.


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices