Skip to main content

Cisco Secure Client Installation (macOS)

Description

NeedUse this recipe to installpackage theand deploy Cisco Secure Client on your macOS devices? FileWave has you covered! Below are the steps to downloadmanaged Macs with FileWave. You will import the FileWave template,templates, uploadreplace the example Cisco package and XML with your CSCfiles, package,approve the required macOS extensions, and gettest readythe toresult deploybefore tobroad your macOS devices.deployment.

Ingredients

Directions

  1. Download and import the twoinstallation filestemplate intoplus FileWavethe andextension createprofile that matches your target macOS version. Create a Fileset Group labelednamed Cisco Secure Client Install or similarsimilar.

     

  2. Open the Fileset Install CiscoSecureClient toFileset. viewIt its contents. The Fileset includescontains two scripts and two placeholders for your customized dmgDMG and xmlXML file.files.

     

    CSCFilesetContents.png

  3. Proceed through the Cisco process of creating your CSC-readable DMG file. You may follow the updated steps onFollow Cisco's KB documentation here:current Customize macOS Installation of Cisco Secure Client. instructions to prepare the DMG and choose the modules your organization needs. The oneDMG and XML in the template Filesetare is an exampleexamples and containmust anbe examplereplaced XML profile configuration. Please refer to Related Content below to createwith your Ciscodeployment CSC-readable DMG file along with customized modules to install.files.

  4. AfterReplace the completionexample of the CSC-readable DMG, replace the oneDMG in the Fileset with yoursthe DMG you prepared.

  5. Open the install CSC script toand modifyupdate the names of the updated CSC-readable DMG name and the Cisco Secure Client version number PKG installername to match whatyour youfiles. have.Escape Ifspaces there are spaces, usein the correctscript syntaxpath, (i.e.,for example Cisco\ Secure\ Client.pkg)pkg.

    The script will attachmounts the DMGDMG, tolocates the volumePKG, of the machine, locate the PKG installer, and extractextracts it to the root directory (you are welcome to change to a different directory, ifinstalls desired).the client, waits 30 seconds, and detaches the DMG. If you haveuse a customized install_choices.xml, filereplace bethe sureexample it has been updated and replacedXML in the Fileset Contents.as Then the script will sleep for 30 seconds to allow installation of the client and detach the DMG from the machine.well.

     

    CSCInstallScript.png

  6. ThereUse are two profiles: one forthe System ExtensionsExtension profile for macOS 11 (and later)later; alongit withalso includes the Web Content Filter and Managed Login Items andsettings. anotherUse containgthe Kernel Extension profile only thefor older macOS versions forthat Kernelstill Extensions.require Be sure you are deploying toit.

    Update the correct macOS version in your enivornment.

    Modify the check_profile script and its launchLaunch argumentArgument to ensurematch it matches either boththe profile bundle IDsID or justIDs theyou macOS 11 (and later).deploy. The Templatetemplate Fileset containschecks only the macOS 1111-and-later (and later) Profileprofile bundle ID.
     

    CSCProfileBundleID.png check_profileedit.png bundleID.png

     

     

  7. Save the contentschanges and assign the Fileset group with your Fileset and profile(s)Group to a fewsmall test devices.pilot. The Filesetgroup Group will deploy profile(s) and the Fileset; oncedeploys the profile hasand beeninstallation installedFileset; successfully,after the Filesetrequired withprofile youris installed, the Cisco Secure Client willinstallation becan installed.proceed.

    CSCFilesetGroup.png

Notes

BeOn surethe topilot test with a few devices before mass-deploying to your production devices. It's always a good habit to test on a few devices toMacs, confirm the properprofile installationis installed, the selected Cisco modules are present, the client opens correctly, and configurationthe ofexpected network connection works before expanding the Cisco Secure Client.assignment.

Related Content

Back to top