A JAMF build system is required in order to use JAMF to deploy the Endpoint Security Agent (HX) software to your macOS endpoints. This section describes how to prepare your JAMF build system by using your JAMF Nation account to access, download, and install the JAMF Suite .
Prepare your JAMF build system by performing the following steps:
Obtain a version of the JAMF Suite software that is compatible with your macOS production environment.
Install the JAMF Suite software on an macOS system or macOS virtual machine that you plan to use for software deployment.
Important
The JAMF Suite software must be installed on a "vanilla" macOS system or macOS virtual machine, a system or machine in its original state that has not received any customized configurations or software updates. The macOS system you select should be used for JAMF deployments only.
Download the Endpoint Security Agent (HX) version 23.10.0 or above from Trellix's Dynamic Threat Intelligence (DTI) offline portal.
Note
Only Endpoint Security Agent (HX) versions 23.10.0 and above can run on macOS platforms. See System requirements for a full list of supported macOS versions.
Downloading and installing the JAMF suite
To obtain the JAMF Suite version, you must have an account on JAMF Nation that is linked to your organization. Contact JAMF Nation at https://www.jamf.com/contact for assistance setting up a JAMF Nation account.
From the macOS system or macOS virtual machine that you plan to use for software deployment, log in to your JAMF Nation account.
From the Profile drop-down menu, click My Assets.
Identify and download the JAMF Suite software version that is compatible with your macOS production environment.
Note
: This procedure was tested against JAMF Suite software versions 9.91 and 9.97. You can access additional versions of the JAMF Suite software by clicking Show Previous Releases under the JAMF Suite Download link.
Install the JAMF Suite software. See JAMF Nation's Product Documentation for JAMF Suite installation instructions.
Important
The JAMF Suite software must be installed on a "vanilla" macOS system or macOS virtual machine, a system or machine in its original state that has not received any customized configurations or software updates. The macOS system you select should be used for JAMF deployments only.
Retrieving the agent installation software and uploading it to the server
You can manually retrieve the Endpoint Security Agent (HX).dmg (macOS) file directly from Trellix DTI. The section describes how to obtain the Endpoint Security Agent (HX) installation package for Trellix's DTI cloud and upload it to your Endpoint Security (HX) Server.
Caution
Before using JAMF to capture and deploy the TrellixEndpoint Security Agent (HX) installation package to your macOS endpoints, you must upload the Endpoint Security Agent (HX) software package to your Endpoint Security (HX) Server to ensure the installation package obtains the agent configuration file and certificates required to provision your Endpoint Security (HX) Server with the agent.
Using the SSH protocol, log in to the Endpoint Security (HX) Server using the management interface's IP address or hostname.
$ ssh <username>@<ipAddress>Or
$ ssh <username>@<ipAddress> | <hostname>Enter the password at the prompt.
Enable CLI configuration mode for your Endpoint Security (HX) Server:
hostname > enablehostname # configure terminalCheck whether any new agent images are available on the DTI:
hostname (config) # fenet hx-agent image checkAlternatively, you can use the following command to refresh the agent metadata available on the DTI.
hostname (config) # fenet hx-agent metadata refreshList all agent images available on the DTI, fetched from the DTI, or available on the local server:
hostname (config) # show fenet hx-agent image availableThis command lists supported operating systems, TrellixEndpoint Security Agent (HX) versions, and the content IDs associated with each agent image available.
Retrieve the .dmg (macOS) agent image from the DTI:
hostname (config) # fenet hx-agent image fetch content-id <content-id>where <content-id> is the content ID associated with the TrellixEndpoint Security Agent (HX) image you want to retrieve.
You can also simply retrieve the latest agent image from the DTI with the following command:
hostname (config) # fenet hx-agent image fetch latestVerify and upload the agent image to the Endpoint Security (HX) Server:
hostname (config) # fenet hx-agent image apply content-id <content-id>where <content-id> is the ID associated with the TrellixEndpoint Security Agent (HX) image you want to upload.
If you retrieved the latest agent image in Step 4, you can upload it to the Endpoint Security (HX) Server using the following command:
hostname (config) # fenet hx-agent image apply latest
Export the agent installation software image
After uploading the Endpoint Security Agent (HX) software to your Endpoint Security (HX) Server, you need to download the installation package to the macOS system or macOS virtual machine you are using for the JAMF deployment.
Log in to the Web UI from the macOS system or macOS virtual machine with the installed JAMF software.
From the Admin menu, select Agent Versions.
Locate the Endpoint Security Agent (HX) installation
.dmgimage file you uploaded to the Endpoint Security (HX) Server in Retrieving the agent installation software and uploading it to the server and click the Download agent installer button to download the file to a location on your macOS system.