DLP 15.8 MacOS Agent install failing with certificate error

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite

Issue/Introduction

When installing the MacOS edpa package we get certificate errors. 

 

Environment

Release : 15.8, 15.8 mp1, 15.8 mp2

Component : MacOS edpa 

Cause

2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: Reading plist file from ./AgentInstall.plist
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINE | Could not get Agent Daemon path
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINE | Could not read Agent install data. Could not find valid installed product. Trying to read installed version from DB
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINE | getConfigFilePATH::Configuration File path is : cg.ead
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINE | isConfigFileExist::Configuration File does not exist : cg.ead
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINE | Failed to read App Version from DB.
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINE | Agent Daemon is not loaded.
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINEST | Agent Install type is PreInstall
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: 2022-02-28 13:26:21 | Installer.main | FINEST | Currently installed agent version (none)
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: action: Addin Certificate file is not valid. -- result: Input/output error
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: ./preinstall: CustomAction returned with an error.
2022-02-28 13:26:21-05 Machine1 package_script_service[2330]: Responsibility set back to self.
2022-02-28 13:26:21-05 Machine1 install_monitor[88715]: Re-included: /Applications, /Library, /System, /bin, /private, /sbin, /usr
2022-02-28 13:26:22-05 Machine1 installd[1766]: PackageKit: releasing backupd
2022-02-28 13:26:22-05 Machine1 installd[1766]: PackageKit: allow user idle system sleep
2022-02-28 13:26:22-05 Machine1 installd[1766]: PackageKit: Cleared responsibility for install from 88714.
2022-02-28 13:26:22-05 Machine1 installd[1766]: PackageKit: Install Failed: Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “AgentInstall_WithCertificates.pkg”." UserInfo={NSFilePath=./preinstall, NSURL=file://localhost/tmp/AgentInstall_WithCertificates.pkg#pkgroot.pkg, PKInstallPackageIdentifier=com.symantec.dlp.edpa, NSLocalizedDescription=An error occurred while running scripts from the package “AgentInstall_WithCertificates.pkg”.} {
     NSFilePath = "./preinstall";
     NSLocalizedDescription = "An error occurred while running scripts from the package \U201cAgentInstall_WithCertificates.pkg\U201d.";
     NSURL = "file://localhost/tmp/AgentInstall_WithCertificates.pkg#pkgroot.pkg";
     PKInstallPackageIdentifier = "com.symantec.dlp.edpa";
 }

Resolution

Install the agent using install_agent.sh instead of repackaging with create_package script

Additional Information

The create_package is no longer supported. see KB 211401