Distributing the product (F-Secure)

To distribute the product

1. To distribute the product through ssh, do the following:
   1. Copy the Computer Protection for Mac package to the target machine using scp or another preferred way.
   2. Run the installer on the target machine using ssh.

      Note: For more information on silent installation, see “Installing the product automatically”.

   3. Run the activator with desired configuration parameters on the target machine using ssh.
2. To distribute the product using MDM or another software distribution solution (for example, Munki) manually activating and configuring it, do the following:
   1. Import the Computer Protection for Mac package into your MDM to allow the installation of the product on the Mac computers in your organization.
   2. Execute the activator with the desired configuration parameters on the target computers using ssh.
   3. Activate the computers and connect them to the F-Secure Elements EPP portal.
3. To distribute the product through MDM using custom package for activation and configuration to allow the installation of the product on the Mac computers in your organization, do the following:
   1. 1. Import the Computer Protection for Mac package into your MDM to allow the installation of the product on Mac computers in your organization.
      2. Create and import into your distribution software a custom macOS software package with activator call as follows:

   PROFILE_ID=<desired profile id>
   TAGS=<desired installation tags>
   ACTIVATION_KEY=<subscription key>

   ACTIVATION_PACKAGE_SCRIPTS=./scripts
   echo “”​”​#​!/bin/zsh
   /Library/F-Secure/activator \\
   –profile-id $PROFILE_ID \\
   –tags \”$TAGS\” \\
   –subscription-key \”$ACTIVATION_KEY\”
   “”” > ./$ACTIVATION_PACKAGE_SCRIPTS/postinstall
   chmod +x ./$ACTIVATION_PACKAGE_SCRIPTS/postinstall
   ACTIVATION_PACKAGE_IDENTIFIER=com.your-company.f-secure.macprotection.activation
   pkgbuild \
   –nopayload \
   –scripts $ACTIVATION_PACKAGE_SCRIPTS \
   –identifier $ACTIVATION_PACKAGE_IDENTIFIER \
   “${ACTIVATION_PACKAGE_IDENTIFIER}.pkg”

   Note: The –nopayload flag means that your package is not listed among the installed packages in macOS, which makes sense as it did not install any files into the system.

   Note: Create the package using the pkgbuild utility provided with macOS.

   1. Create as many activation packages as you need and then assign them to specific devices or device groups, whatever your software distribution solution supports.

      Note: The original Computer Protection for Mac package stays intact and keeps its designated signature. For macOS to validate your custom package, it needs to be signed and notarized.

4. To distribute the product through MDM using one package for both installing and activating the product, do the following:
   1. 1. Create a special product package based on the Computer Protection for Mac package using the following prepare-installer.sh script:

   prepare-installer.sh \
   /path/to/com.f-secure.macprotection.mpkg \
   /path/to/install-and-activate.pkg \
   “<Signing identity>” \
   “<profile id>” \
   “<installation tags>” \
   “<subscription key>”

   Note: You can use the script as is or as an inspiration to create your own script that better suits your needs.

Source : Official F-Secure Brand
Editor by : BEST Antivirus KBS Team