How to convert an unmanaged Endpoint Protection for Macintosh client to managed

Products

• Endpoint Protection

Issue/Introduction

It is necessary to convert an unmanaged Symantec Endpoint Protection (SEP) for Macintosh client into a managed client.

This process can also be used to update the sylink file on a previously managed client.

 

Environment

• Symantec Endpoint Protection 14.3.x macOS agent.

Resolution

The communication file (sylink.xml) can be updated using SylinkDrop tool which is included during the installation of the macOS SEP agent.  It's recommended to update the sylink.xml file using this method.  Alternatively, you can replace the file manually, but it involves extra steps.  For either method you'll first have to export a sylink.xml file from the SEPM.

Export Sylink.xml from SEPM

First you must export communications settings (sylink.xml) from the target client group within the Symantec Endpoint Protection Manager (SEPM), then copy it to the Desktop of the Macintosh you wish to make managed.

1. Open the Symantec Endpoint Protection Manager (SEPM) console.
2. Click on the Clients tab, and then right-click on the group that the SEP for Mac client should reside in once converted to managed.
3. Choose "Export Communications Settings", and when prompted, save the file to a location such as the Desktop.
   • Note: The file will have a long name prefaced with the group information. Rename the file so that it is only called "sylink.xml".

SylinkDrop

The SyLinkDrop tool is installed with the SEP 14.3.x macOS client in the /Applications/Symantec Solutions directory.

The SyLinkDrop version used must match the SEP for Mac client version. This is due to differences in the SEP master service that SyLinkDrop tries to restart after replacing the sylink.xml.

1. On the Macintosh where SEP is installed, launch the SylinkDrop tool.
2. Click "Browse" to browse for the sylink.xml file previously exported from the SEPM.
3. Press "Update SyLink" to update. You will be prompted to input your admin password.
4. If successful, you will see the message: "Replace SyLink File Successfully"
5. Press "Exit" to close the application.

Replace file manually

You may also manually place the sylink.xml file into the appropriate folder on the Macintosh client computer per the following instructions:

1. Copy the sylink.xml file to the target macOS system.
2. On the client computer that's going to be converted to a managed client, stop the symdaemon (see Technical Information below).
3. Copy the sylink.xml file to the client machine, pasting it into the following folder
   • /Library/Application Support/Symantec/Silo/MES/SMC
4. Reboot the computer, or restart the smcdaemon (or symdaemon) on the Mac.

Technical Information

In a Terminal window:

• sudo launchctl unload /Library/LaunchDaemons/com.symantec.symdaemon.*plist
• sudo launchctl load /Library/LaunchDaemons/com.symantec.symdaemon.*plist

NOTE:

• When prefacing the command with sudo, there will be a prompt to authenticate with an administrator password (the password entry will not echo to the Terminal window).
• The asterisk in daemon pathnames will accommodate suffix variations - SEP 14.0 uses .NFM.plist