AI Docs

Deployment of the Certero macOS Agent Using 3rd Party Tools | v8.8+

2 min read

image-20251116-164129.png

If you have a third party tool that can be used to install software on your Apple macOS computers, you will need to download the PKG installer and create a .sh file that includes the setup config for the client agent. You can obtain the PKG installer from the following location:

  1. Download the “Client Agent Setup for macOS” from within the Certero platform from the User > Downloads section.

  2. Import the PKG file into your 3rd party deployment tool.

  3. Create a .sh file which will be used to silently install the Certero client macOS agent with the required configuration via your 3rd party deployment tool:

#!/bin/sh

# Paths and filenames
CLIENTDIR=/Library/assetstudio/client
CONFIGDIR=$CLIENTDIR/config
CONFIGFILE=$CONFIGDIR/options.conf

# Pre-create the necessary directory
mkdir -p $CONFIGDIR

# Write the options.conf configuration file
echo "# AssetStudio agent configuration" > $CONFIGFILE
echo "ActiveName=<Endpoint Server FQDN>" >> $CONFIGFILE
echo "ActivePort=<443 or 80>" >> $CONFIGFILE
echo "ActiveSSL=<0/1/2>" >> $CONFIGFILE
echo "DefaultName=<Endpoint Server FQDN> " >> $CONFIGFILE
echo "DefaultPort=<443 or 80>" >> $CONFIGFILE
echo "DefaultSSL=<0/1/2>" >> $CONFIGFILE
echo "TenantId=<Tenant ID>" >> $CONFIGFILE

# Run the installer silently
touch $CONFIGDIR/UnattendedInstall
installer -pkg "CerteroAgent.pkg" -target /
rm -f $CONFIGDIR/UnattendedInstall

The parameters that will need to be amended are:

  • ActiveName/DefaultName:

    • FQDN of an endpoint server that the macOS agent will be able to
      communicate with i.e. customer-1234.cloud.certero.com

  • ActivePort/DefaultPort:

    • The port of the Certero Endpoint Server website (80 = http, 443 =
      HTTPS).

  • ActiveSSL/DefaultSSL:

    • Enable or disable SSL communication. Possible values are:
      0 – disabled
      1 – enabled
      2 – enabled (ignore invalid server certificates)

  • TenantId:

    • The TenantID of the system (can be found in User > Download section of the
      platform.

If using port 80; SSL should be set to 0. If using port 443; SSL should be set to 1 or 2.

If you reinstall the agent on any Mac you just need to include the following lines:

#!/bin/sh
# Run the installer silently
touch $CONFIGDIR/UnattendedInstall
installer -pkg "CerteroAgent.pkg" -target /
rm -f $CONFIGDIR/UnattendedInstall

 

Certero are unable to provide support around specific third-party Apple Software Deployment tools.