Installing Symantec Endpoint Protection for Macintosh

Article:TECH131675  |  Created: 2010-01-13  |  Updated: 2014-09-29  |  Article URL http://www.symantec.com/docs/TECH131675
Article Type
Technical Solution

Product(s)

Issue



What options are available when installing Symantec Endpoint Protection for Macintosh (SEP for Mac) on a Mac OS X client?

 


Solution



In a mixed environment of Windows and Macintosh systems, Macintosh workstations will need to have a managed install of the Symantec Endpoint Protection for Macintosh client.

Managed Installs:

To install a managed Symantec Endpoint Protection for Macintosh client, an exported package must first be created on a Symantec Endpoint Protection Manager (SEPM).

To create the export package

  1. Log on to the Symantec Endpoint Protection Manager.
  2. On the Admin tab, select Install Packages.
    The Mac install package appears in the list of available packages to export.
  3. Select the Mac package and, in the Tasks list, click Export Client Install Package...
  4. Click Browse, then choose where to save the exported package.
  5. Select the group in which you wish the Mac client to appear.
    Note: The Mac client can be a member of a group that contains Windows clients and vice versa.
  6. Click OK to export the client package.


Symantec Endpoint Protection Manager does not support push deployment directly to Macintosh clients. Once the client package is exported, the package can be distributed to Macintosh clients for installation by any of the following methods:
 

  • Placing the installer on an SMB share to be copied locally and run
  • Copying to removable media and deploying locally
  • Distributing using a software distribution method such as Apple Remote Desktop or Filewave

Note: Beginning with Symantec Endpoint Protection 12.1, the Client Deployment Wizard can automate the creation of Macintosh client installation packages using Web link and email or Save package.

When installing the exported Symantec Endpoint Protection for Macintosh client, you can choose either install as unmanaged or managed. However, if a managed install of Symantec Endpoint Protection is already present on the system, the user can only choose to install a managed client.

Silent managed installs:

The Symantec Endpoint Protection for Macintosh client can be installed silently after an export of the package from a Symantec Endpoint Protection Manager. This option prevents the regular Installer UI from appearing to the User and the SEP for Mac client will install according to the settings made by the Administrator. The client will install as either Managed or Unmanaged without intervention by the User and the User will not be able to change these settings.

To install the exported package to run silently without any user interaction or alerts:

  1. Export the package from the Symantec Endpoint Protection Manager using the steps above
  2. Copy the package to a Mac OS X system
  3. Open the Terminal in /Applications/Utilities
  4. In the Terminal, enter the following command: sudo /usr/sbin/installer ­-pkg <pathToPackage> -target <MountPoint>

<pathToPackage> is the path to locate the copy of the Symantec Endpoint Protection client package that was exported and copied to the Macintosh.
<MountPoint> is the volume where the package will be installed to.

As the install package requires authentication, use of sudo and an Administrator password is required to use the above Terminal command.

Unmanaged Installs:

To install an unmanaged Symantec Endpoint Protection for Macintosh client:
 

  • Choose to select "Unmanaged" from the install options for an exported Symantec Endpoint Protection for Macintosh client.
  • Run the Symantec Endpoint Protection for Macintosh client installer in the SEP_MAC install folder in the Symantec Endpoint Protection download folder (unzip the Symantec Endpoint Protection file in this folder to access the installer .mpkg file)


Once either an unmanaged or managed client is installed the User will need to log out and log back into the system to complete the install process.


 




Legacy ID



2010041316121048


Article URL http://www.symantec.com/docs/TECH131675


Terms of use for this information are found in Legal Notices