Remove the legacy system extension of the Symantec Endpoint Protection client for Mac before or after upgrading to the newest versions

Products

• Endpoint Protection

Issue/Introduction

If you have a legacy build of Symantec Endpoint Protection client (version earlier than 14.3 MP1) installed on your Mac device, the upgrade to the latest versions of the Symantec Endpoint Protection client can leave behind the older system extension.

This document provides the means to completely disable and also alternatively remove the old system extension if it is left behind.
The referenced tool was created as an alternative means to resolve issues that arise after upgrading and running into the issue from the below article.

Upgrade of SEP for Mac to version 14.3 MP1 leaves Symantec systemextension still loaded

Resolution

If you want to perform the Symantec Endpoint Protection client upgrade using a SEPRemote.pkg, follow the steps below:

Step	Actions
1. Replace the legacy system extension with the legacy dummy system extension.	Download the Symantec Endpoint Protection Legacy.app.pkg file and run it on your Mac device. Follow the steps in the installation wizard to install the application. Restart your device. Run the following command to check the com.broadcom.mes.systemextension version: systemextensionsctl list The version should show (99.0.1/99.0.1)
2. Install any Broadcom version of Symantec Endpoint Protection client (version 14.3 MP1 and later).	For more information about installing a Symantec Endpoint Protection client for Mac, see the following topics: In case you want to enroll your Mac in Symantec Endpoint Protection Manager, see Choosing a method to install the client. In case you want to enroll your Mac in the cloud console, see Installation methods for the Symantec Agent.
3. (Optional) Remove the Symantec Endpoint Protection Legacy system extension.	On your Mac device, in Finder, open /Applications/Symantec Solutions folder. Hold down the Command, Shift and Period keys: [command] + [shift] + [.] to open the Symantec Endpoint Protection Legacy application. Drag the application to Trash. In the Symantec Endpoint Protection Legacy application removal confirmation popup, click Continue. Provide the credentials. Symantec Endpoint Protection Legacy application and system extension will be removed from system.

 

Additional Information

The pkg file is designed to be used by remote deployment tools like JAMF so that it can be run silently. Listed above are the interactive manual instructions.

You can alternatively run the Symantec Endpoint Protection Legacy.app.pkg after the upgrade if necessary.

The information in this document is only required if you do not remove the old SEP versions prior to 14.3 MP1, before upgrading to 14.3 MP1 and later which uses a new Broadcom branded system extension.