Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: macOS installation #28

Merged
merged 2 commits into from
Aug 12, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions administration/agent.rst
Original file line number Diff line number Diff line change
Expand Up @@ -89,16 +89,16 @@ To install the agent on macOS, you can just run the PKG file or execute the foll

.. code-block:: console

MacBook-Pro:~ nextron$ sudo installer -pkg /home/nextron/Downloads/asgard2-agent-macos-amd64.pkg -target /
MacBook-Pro:~ nextron$ sudo installer -pkg /home/nextron/Downloads/asgard2-agent-macos-arm64.pkg -target /

Starting with macOS Big Sur (v11.0), Apple requires software developers
to notarize applications. Our ``asgard2-agent`` installer is notarized.

You can test this by exectuing the follow commands in terminal:
You can test it by executing the following command in Terminal:

.. code-block:: console

MacBook-Pro:~ nextron$ pkgutil --check-signature /home/nextron/Downloads/asgard2-agent-macos-amd64.pkg
MacBook-Pro:~ nextron$ pkgutil --check-signature /home/nextron/Downloads/asgard2-agent-macos-arm64.pkg
Package "asgard2-agent-macos-arm64.pkg":
Status: signed by a developer certificate issued by Apple for distribution
Notarization: trusted by the Apple notary service
Expand Down Expand Up @@ -139,4 +139,4 @@ If you need to grant Full Disk Access via MDM, please have a look at the chapter
with THOR scans via ASGARD on macOS, please check if the ``Full Disk
Access`` permission for the ASGARD agent was granted. Since macOS Mojave
(v10.14), you need to grant the same permissions to removable volumes,
if you plan on scanning those.
if you plan on scanning those.
4 changes: 3 additions & 1 deletion appendix/mdm-fulldiskaccess.rst
Original file line number Diff line number Diff line change
Expand Up @@ -24,4 +24,6 @@ You have to copy the output, starting from ``identifier`` in your MDM profile in
MacBook-Pro:~ nextron$ /usr/libexec/PlistBuddy -c "print" /Library/Application Support/com.apple.TCC/MDMOverrides.plist
For further support, please take a look in the manuals of your MDM provider.
You can create the mobileconfig file by using the PPPC utility from JAMF: https://github.com/jamf/PPPC-Utility

For further support, please take a look in the manuals of your MDM provider.