topic Re: Mac Endpoint - Silent upgrade from command line in Endpoint

Mac Endpoint - Silent upgrade from command line

Howard_Gyton — Thu, 28 Apr 2022 13:11:25 GMT

According to the following SK, silent installations are possible:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108500&partition=Advanced&product=Endpoint

That works just fine, but what about upgrades to an existing installation?

When I try that, going from E86.20 to E86.30, I am stopped by a GUI element asking me to enter a password, where I have to enter the password configured in the "Client Settings" policy.

Is there a way to supply that password at the command line? I had a dig around in the .pkg but didn't find anything.

Re: Mac Endpoint - Silent upgrade from command line

G_W_Albrecht — Fri, 29 Apr 2022 07:35:00 GMT

Why not use Automatic Client Upgrade from the Security Gateway instead ? See how to do that on the last pages of Endpoint Security VPN for macOS E86.30 Release Notes

Re: Mac Endpoint - Silent upgrade from command line

Howard_Gyton — Fri, 29 Apr 2022 08:40:32 GMT

We have two management servers. One manages our firewalls, the other is the standalone Endpoint server. The Endpoint Global Properties doesn't have a "Remote Access" section, but the firewall manager obviously does.

I assume this would work in that instance as the files are actually copied to the firewalls themselves?

The one thing we would lose here is the ability to schedule those upgrades. We want to manage this via Altiris, where we can push the upgrade tasks out manually, or via a policy attached to a group that we drop computers in to.

But that's an interesting feature I have not looked at before, so thanks.

Re: Mac Endpoint - Silent upgrade from command line

G_W_Albrecht — Fri, 29 Apr 2022 08:51:19 GMT

For Endpoint Servers see https://sc1.checkpoint.com/documents/E86.30/EN/CP_E86.30_Endpoint_Security_Client_for_macOS_Release_Notes/Content/Topics/Deploying-New-Client.htm?tocpath=Deploying%20Endpoint%20Security%7C_____0#Upgrading_the_Client

Re: Mac Endpoint - Silent upgrade from command line

Howard_Gyton — Fri, 29 Apr 2022 09:37:49 GMT

Thanks again. I'm just now looking at the web interface.

According to the R81.10 documentation the Mac specific functionality appears to be planned:

I am able to create a deployment rule, but there are no Mac specific features as yet, and you cannot chose whether it is a Mac or Windows deployment rule.

I assume this will come with R81.20, and it will probably do exactly what we want. I hope that would also come with a version of the new Tiny client, which I will look to switch over to as well from our current Initial Client builds.

Interesting times ahead.

Re: Mac Endpoint - Silent upgrade from command line

G_W_Albrecht — Fri, 29 Apr 2022 09:58:19 GMT

The CP portal Endpoint Management has the Tiny client EPS_TINY.zip for download (only for OS X > 10.14!) and the Mac deployment:

But yes, this will only be available in R81.20 for On Premise EPSS.