hint: One can use the following command in terminal to derive the Team and Bundle IDs for the system extension if you ever have to create these for an app.I upgraded to test the beta version of Monterey. FortiClient6.0.9.162 We do use the free version, and only the VPN, so only the nwextension is necessary (see below). We also deploy the FortiClient settings for PPPC and System extensions to any device with FortiClient installed (hence the maintenance option in the install), and those are similar to the solution in the thread. #Copy vpn.plist from tmp to FortiClient config folderĬp /private/tmp/FortiClient_7.0.3_Source_Files/vpn.plist "/Library/Application Support/Fortinet/FortiClient/conf/" Installer -verboseR -pkg "/private/tmp/FortiClient_7.0.3_Source_Files/FortiClient 7.0.3.mpkg" -target / Applications/FortiClientUninstaller.app/Contents/Library/LaunchServices/_helper #Initiates silent uninstall of current Forticlient mpkg and the vpn.plist from a machine with the connection settings in composer, then I deliver the files to a temp directory and use the script to install (after) the package and connection settings: I've adapted the build workflow created by in this thread. What I've found is that you need to run the uninstaller for the previous version first, then install the new one. Specifically the System Extensions and the Privacy settings. Sorry, I know this is a lot, but I want to make sure I'm not missing something, especially since I've never worked with these functions of configuration profiles before. I suspect this is fine, but I don't know. Of note, that program is in the PPPC as ".antivirus" instead of the filepath. However, I've noticed, specifically, Catalina doesn't add the one program to Full Disk Access and you end up needing to search for it. Will they work if they're installed before the app is?. I added them to this same config profile, and I think they're correct. System Extensions is the only other thing I'm worried about. I haven't tested this, but supposing it works I don't have any questions about it since I know it needs to go on first. I have a blank VPN being deployed in the same config profile using .vpn in the Custom SSL settings (someone else on here suggested this solves that issue if you deploy it first). Are they hidden because they're installed this way? Will it cause a problem if I deploy those before the policy for the install, when the filepaths and apps don't exist yet? It seems to be working this way currently, but I don't see those settings in the System Prefs Privacy panel.I used PPPC to grab those Full Disk Access settings from an install and make a config profile. Full Disk Access, requests for VPN connections, and request for System Extensions. Unfortunately though, FortiClient needs users to make tons of changes to System Prefs. I need to get curl to fail out of the script if the download fails, but I haven't looked into it yet so I'm sure I can find a way. I have a script that grabs the file from our server and installs it. I can post configs as necessary, but I suspect that they aren't needed for these questions as it's more about how these functions work. I still have some more testing to do but it seems to work on the one I tried, but maybe it was a fluke. I'm trying to deploy FortiClient 7.0.2, and I have some questions about order of operations and whether this is going to cause trouble on specific OS versions.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |