After you create the JAMF package for the Endpoint Security (HX) software, you can deploy it to any OS X endpoints that have been enrolled in JAMF. Deploying the agent software involves setting up a policy in JAMF. This section describes how to set up this policy, create a script to start agent services on your endpoints, add the script to the deployment policy, and deploy the agent software to specific systems.
Setting up a JAMF deployment policy
JAMF deployment policies allow you to identify the OS X endpoints and host groups that should receive the policy and associate the agent JAMF package with a JAMF script and use the script to run the software on the assigned endpoints.
Open JAMF Admin.
Using JAMF Admin, upload the
.pkgfile you created and saved in Building the package for deployment by completing the following steps:Drag and drop the
.pkgfile into JAMF Admin.Assign the package to a category.
Select File > Save to save the file in your JAMF environment.
.png "Casper-2-1pkgupload.png")
Log in to the JAMF Web Console and click on Computers and then Policies.
Click New to create a policy to push the package to your Endpoint Security (HX) server host endpoints that are managed by JAMF.
.jpg "Casper-2-2newpolicy.jpg")
From the Options tab, select General and enter an appropriate display name in the Display Name field.
From the Category Field drop-down menu, select a JAMF category to add to the policy.
.png "Casper-2-3genoptions.png")
Under the Trigger section, select the trigger options that are required for your environment and deployment plan. For example, the agent software package is made available in Self Service later in these steps, so no trigger options are set in the screen below.
.png "Casper-1-8triggers.png")
From the Options tab, select Packages and add the package you uploaded in step 2 in the Packages pane on the right side of the screen.
.png "Casper-2-4pkgoptions.png")
Select the Self Service tab and select Make the policy available in Self Service.
.jpg "Casper-2-5selfsrvc.jpg")
Click Save.
Creating a script to start xAgent services
After deploying the Endpoint Security (HX) software package to your OS X endpoints, you need to start the agent services on your Endpoint Security (HX) server endpoints. The JAMF Web Console allows you to create a script that will install the agent software package after the policy deploys the package to an endpoint and start agent services.
In the JAMF Web Console, click the Gear button (settings).
Click the Computer Management tab in the left pane and click the Scripts icon in the right pane
.png "Casper-2-6webconsole.png")
Create and name the new script. For example, the Display Name for the script shown below is Start xAgent Service.
.png "Casper-2-7newscript.png")
Select the Script tab and add the code below. Be sure to replace
xagtSetup_[xAgent version].mpkgwith the actual name of your .mpkg file. For example,xagtSetup_[xAgent version].mpkg).#!/bin/shDIR1="/Library/Application Support/FireEye/" FILE1="xagtSetup_[xAgent version].mpkg" FILE2="agent_config.json" installer -pkg "$DIR1$FILE1" -target / sleep 30 rm "$DIR1$FILE1" rm "$DIR1$FILE2".jpg "Casper-2-8scriptedits.jpg")
Click Save.
Adding the script to the deployment policy
This section describes how to add the script you created in Creating a script to start xAgent services to the deployment policy you created in Setting up a JAMF deployment policy.
Locate the policy you created in Setting up a JAMF deployment policy step 4 and click Edit.
From the Options tab, select Scripts and add the script you created in Creating a script to start xAgent services step 3 in the Scripts pane.
Select the Scope tab and click Targets.
From the Target Computers drop-down menu, add the OS X endpoints that you want to apply the policy to in Self Service. I
.png "Casper-2-10deploy.png")
From the Target Users drop-down menu, add the users or user groups that you want to apply the policy to in Self Service.
Click Add and Save to deploy the Endpoint Security (HX) software to your assigned endpoints and user groups.
Installing the agent software on OS X endpoints
Users with endpoints assigned the deployment policy can now install the Endpoint Security (HX) software and start agent services using the JAMF's Self Service tool.
Note
To completely automate the Endpoint Security (HX) software installation on the endpoint, set a trigger option for "Recurring Check-In" and remove the "Make Available in Self Service" condition from the deployment policy.
Log into a host endpoint that has the deployment policy assigned.
Launch JAMF's Self Service tool.
Go to the JAMF category where the policy is located and click Install.
.png "Casper_SelfService_Install.png")
The agent software is now installed on that OS X endpoint.