Skip to main content

Cisco Secure Client Installation (macOS)

Description

Use this recipe to package and deploy Cisco Secure Client to managed Macs with FileWave. You will import the FileWave templates, replace the example Cisco package and XML with your files, approve the required macOS extensions, and test the result before broad deployment.

Ingredients

Directions

  1. Download and import the installation template plus the extension profile that matches your target macOS version. Create a Fileset Group named Cisco Secure Client Install or similar.

     

  2. Open the Install CiscoSecureClient Fileset. It contains two scripts and placeholders for your customized DMG and XML files.

     

    CSCFilesetContents.png
  3. Follow Cisco's current Customize macOS Installation of Cisco Secure Client instructions to prepare the DMG and choose the modules your organization needs. The DMG and XML in the template are examples and must be replaced with your deployment files.

  4. Replace the example DMG in the Fileset with the DMG you prepared.

  5. Open the install script and update the DMG name and Cisco Secure Client PKG name to match your files. Escape spaces in the script path, for example Cisco\ Secure\ Client.pkg.

    The script mounts the DMG, locates the PKG, extracts it to the root directory, installs the client, waits 30 seconds, and detaches the DMG. If you use a customized install_choices.xml, replace the example XML in the Fileset as well.

     

    CSCInstallScript.png
  6. Use the System Extension profile for macOS 11 and later; it also includes the Web Content Filter and Managed Login Items settings. Use the Kernel Extension profile only for older macOS versions that still require it.

    Update the check_profile script and its Launch Argument to match the profile bundle ID or IDs you deploy. The template checks only the macOS 11-and-later profile bundle ID.
     

    CSCProfileBundleID.png check_profileedit.png bundleID.png

     

     

  7. Save the changes and assign the Fileset Group to a small pilot. The group deploys the profile and installation Fileset; after the required profile is installed, the Cisco Secure Client installation can proceed.

    CSCFilesetGroup.png

Notes

On the pilot Macs, confirm the profile is installed, the selected Cisco modules are present, the client opens correctly, and the expected network connection works before expanding the assignment.