Skip to main content

Cisco Secure Client Installation (macOS)

Description

Need to install the Cisco Secure Client on your macOS devices? FileWave has you covered! Below are the steps to download the FileWave template, upload your CSC package, and get ready to deploy to your macOS devices.

Ingredients

  • FW Admin

  • Cisco Secure Client DMG file, example file name from your Cisco portal:

    • cisco-secure-client-macos-<version>-predeploy-k9.dmg

    TCC profile for kernel/system extension macOS 11 (and later) for System Extension TCC profile: Profile - Cisco Secure Client System Extensions macOS 11 (and Kernel Extensions.after).fileset.zip Template Install Cisco Secure Client Fileset
      Install Cisco Secure Client.fileset.zip

      Directions

      1. Download and import the two files into FileWave and create a Fileset Group labeled Cisco Secure Client Install or similar

         

      2. Open the Fileset Install CiscoSecureClient to view its contents. YouThe shouldFileset seeincludes threetwo items -  the .dmg placeholderscripts and two scripts.placeholders for your customized dmg and xml file.

         

        FilesetConents.pngCSCFilesetContents.png

      3. Proceed through the Cisco process of creating your CSC-readable DMG file. You may follow the updated steps on Cisco's KB documentation here: Customize macOS Installation of Cisco Secure Client. The one in the template Fileset is an example and does not contain youran example XML profile configurations.configuration. Please refer to Related Content below to create your Cisco CSC-readable DMG file.file along with customized modules to install.

      4. After the completion of the CSC-readable DMG, replace the one in the Fileset with yours

      5. Open the install CSC script to modify the names of the updated CSC-readable DMG and the Cisco Secure Client version number PKG installer to match what you have. If there are spaces, use the correct syntax (i.e., Cisco\ Secure\ Client.pkg).

        The script will attach the DMG to the volume of the machine, locate the PKG installer, and extract it to the root directory (you are welcome to change to a different directory, if desired). If you have a customized install_choices.xml file be sure it has been updated and replaced in the Fileset Contents. Then the script will sleep for 6030 seconds to allow installation of the client and detach the DMG from the machine.

         

        CiscoSecureClientInstallScript.pngCSCInstallScript.png

         

      6. There are two profiles: one for System Extensions for macOS 11 (and later) along with Web Content Filter and Managed Login Items and another containg only the older macOS versions for Kernel Extensions. Be sure you are deploying to the correct macOS version in your enivornment.

        Modify the check_profile script and its launch argument to ensure it matches theeither both profile bundle ID.IDs Double-clickor to openjust the ProfilemacOS 11 (and copylater). The Template Fileset contains only the macOS 11 (and later) Profile bundle ID.
         

        CSCTCCProfile.pngCSCProfileBundleID.png check_profileedit.png bundleID.png

         

         

      7. Save the contents and assign the Fileset group with bothyour Fileset and profileprofile(s) to a few test devices. The Fileset Group will deploy both profileprofile(s) and Fileset,the andFileset; once the profile has been installed,installed successfully, the Fileset with your Cisco Secure Client will be installed.

        FilesetGroup.pngCSCFilesetGroup.png

      Notes

      Be sure to test with a few devices before mass-deploying to your production devices. It's always a good habit to test on a few devices to confirm the proper installation and configuration of the Cisco Secure Client.

      Related Content

      Customize macOS Installation of Cisco Secure Client

      Creating MDM approved System/Kernel Extensions Guide
      Back to top