Exporting and deploying the Endpoint Protection Macintosh client with remote tools


Article ID: 181587


Updated On:


Endpoint Protection




Starting with Symantec Endpoint Protection (SEP) 12.1.4, you can export and configure a Macintosh client installation package (SEPRemote.pkg) for deployment with third-party software distribution programs Apple Remote Desktop, Jamf, or other remote management tools. 

The SEPRemote.pkg is not signed or notarized by Symantec because it contains elements that are unique to each customer's environment—SEP management server address(es), certificates, etc—and customer must obtain their own Apple Developer ID to sign and notarize pkg files. Consult Apple technical support for help with obtaining a developer identity and notarization: Notarizing macOS Software Before Distribution.

Export the package

  1. In the console, on the Home page, in the Common Tasks menu, click Install protection client to computers.
  2. In the Client Deployment Wizard, click New Package Deployment to configure a new installation package, and then click Next.
  3. Click the Install Packages menu and select the Mac package from the available options. Click All content (Recommended), and then click Next.
  4. Click Save Package for the installation method, and then click Next.
  5. Click Browse… to specify the folder where you want to save the package, and then click Next.
  6. On the final summary page, click Next to create the package.

Configure the package for remote deployment

  1. After the package creation completes, browse to the location you previously specified, and then copy the .zip file to the Mac on which your remote deployment program in installed. By default, the file name is Symantec Endpoint Protection.zip.
  2. Right-click on the .zip file and click Open With > Archive Utility to decompress the .zip file.
  3. Double-click Symantec Endpoint Protection Installer to launch the application.
  4. Click Continue in the warning message to acknowledge that a system restart is required after install.
  5. In the menu, click Tools > Create remote deployment package. Accept the default package name or type in a new name, select a folder where you want to save the file, and then click Save.
  6. When the package creation completes successfully, click OK. The file name is SEPRemote.pkg.

Deploy using Apple Remote Desktop or Casper

Note: These instructions are provided for your convenience. For more detailed instruction or technical assistance using your software distribution solution, consult the documentation that comes with it.

To deploy SEP Macintosh client using Apple Remote Desktop

  1. Open Apple Remote Desktop.
  2. Select the target Macs from the list of all available computers, and then click Install to add the package.
  3. Click the plus (+) to locate and add SEPRemote.pkg, click Attempt restart, allow users to save documents, and then click Install to begin deployment.

To deploy SEP Macintosh client using Casper

Casper also provides policies for software installation and for running scripts, which you can use to install SEP Macintosh client. Consult your documentation to configure these policies in Casper Server / JSS Server.

  1. Open and log on to Casper Admin.
  2. Drag and drop SEPRemote.pkg into the window, and then click File > Save.
  3. Open and log on to Casper Remote.
  4. In the Computers tab, select the target Macs from the list of available computers.
  5. In the Packages tab, check SEPRemote.pkg.
  6. In the Restart tab, click Restart if a package or update requires it for if no user is logged in, and Restart for if a user is logged in. NOTE: Mac users will see errors if trying to use SEP before this restart
  7. Click Go.