You can install the Webroot Business Endpoint Protection agent to macOS. It is important to use the correct keycode for the site when deploying the Webroot agent. The keycode is a vital part of communications and using the wrong one will prevent the agent from working properly.

Upgrading the agent
To upgrade the agent, download and run the agent installer, there is no need to uninstall the previous version first.

Installation requirements
  Installation file

The Webroot macOS agent PKG installation file is available here and can be downloaded from the Endpoint Protection tab when viewing a site in the Webroot Management console.

Full Disk Access (FDA)
Apple requires the Webroot agent be granted Full Disk Access. Without this access, the Webroot agent will not be able to complete scans. You will be prompted to enter a username and password to enable it during the installation.

Click a topic below to see more information.

+Installing locally using the Applications folder
  1. Download the agent installation file to the Apple device you are installing the Webroot agent to.
     
  2. Double-click Webroot SecureAnywhere or drag it to the Applications folder.
     
  3. Acknowledge system messages and enter account information when asked.
     
  4. Enter the Webroot keycode when prompted.
     
  5. The installation process is finished once the first scan completes. The device will soon appear in the Webroot Management console, which is used to manage the agent.

+Installing locally using a terminal command
You can use a terminal command and script to install the Webroot agent. This installation method allows you to:
  • Set the keycode.
  • Designate proxy information.
  • Complete a silent installation.
  • Suppress the automatic launch of the agent after installation.
 
The installation script is available in this article, see the +Installing remotely using a script section.

To use the script, download the installer file and script to the same directory on the device.

From a terminal window, enter:

sudo ./installMacWSA.sh --pkg=./WSAMAC.pkg -command_option1 -command_option2 -command_option3 ...

Where: 
  • command_option1 is the first optional command line option
  • command_option2 is the second optional command line option
  • command_option3 is the third optional command line option, etc.  
 
See the next section, +Terminal command options, for a list of command line options available.

+Terminal command options
Mac Terminal command options:
Option Description
--pkg=path_to_installer.pkg Required command. Note the double dashes.
-keycode=XXXX-XXXX-XXXX-XXXX Specifies the keycode (XXXX-XXXX-XXXX-XXXX) to use for installation.
Note for Silent Install: If left out, the user will be prompted for a keycode when the agent starts. For a true silent installation experience with zero customer interaction, provide a keycode.
-silent=true Optional. Installs the agent silently without presenting any prompts to the user.
-suppress_auto_launch=true Optional. When set to true, suppresses both the auto-launch of the client after an install and the FDA setting reminder dialog. This setting is ignored if the keycode parameter is not passed.
Note on FDA: FDA access for the Webroot agent needs to be setup for this option to be safely used.
Note for Silent Install: Use this option to provide a true silent experience and prevent the product from being shown to the user. It will still run in the background, but do it in a way that does not interrupt the user.
-proxy_auth=
-proxy_host=
-proxy_port=
-proxy_user=
-proxy_pass=
 
Optional. Specifies the proxy server information the agent should use for internet communication.

-proxyauth - specify the authentication type in use by the proxy server, possible values include:
  • 0 - Any
    • Results in the agent searching through all the authentication types. This can take a long time and result in errors on the proxy server - this option is not recommended.
  • 1 - Basic
  • 2 - Digest
  • 3 - Negotiate
  • 4 - NTLM
-proxyhost - IP address of the proxy server
-proxyport - port for the proxy server
-proxyuser - username to use to log into the proxy server
-proxypass - password to log into the proxy server
  
+Terminal command examples
Here are examples of terminal commands that can be used to install the Webroot agent to macOS when using the installMacWSA.sh shell script (examples assume installer and script are in same local folder):

To install silently, using example keycode XXXX-XXXX-XXXX-XXXX:

sudo ./installMacWSA.sh --pkg=./WSAMAC.pkg -silent=true -keycode=XXXX-XXXX-XXXX-XXXX

To install silently and ensure no FDA prompt is displayed, using example keycode XXXX-XXXX-XXXX-XXXX:

sudo ./installMacWSA.sh --pkg=./WSAMAC.pkg -silent=true -suppress_auto_launch=true -keycode=XXXX-XXXX-XXXX-XXXX
 

+Installing remotely using a script
 
IMPORTANT NOTE: These instructions contain an example shell script and are provided as-is. It should only be used by those experienced with scripts and should be fully tested before use. Webroot Support does not troubleshoot or support scripts and will not answer script related questions.
 
#!/bin/sh
echo "WSA Mac install script"
# All Valid Parameters are listed below.
# Required Command: pkg. Location of the WSA Mac package. Format: --pkg=<pkg/location>
# Command: keycode. Installation will not prompt for keycode. Format: -keycode=<keycode>
# Command: silent. This will make the installation silent. Format: -silent=true
# Command: suppress_auto_launch. When set to true, suppresses both the auto-launch of the client after an install and the FDA setting reminder dialog. This setting is ignored if the keycode parameter is not passed. Format: -suppress_auto_launch=true
# Command: proxy_auth, proxy_host, proxy_port, proxy_user, proxy_pass. This designates proxy install arguments include authorization method, host, port, user, and password. Format: -proxy_auth=auth_any_0 -proxy_host=<host> -proxy_port=<port> -proxy_user=<user> -proxy_pass=<password>

# Full example string
# sudo ./installMacWSA.sh --pkg=WSAMAC.pkg -silent=true -suppress_auto_launch=true -keycode=XXXX-XXXX-XXXX-XXXX -proxy_auth=auth_basic_1 -proxy_host=proxy.proxy.com -proxy_port=8080 -proxy_user=proxyuser.com -proxy_pass=proxypass

# Establish the user that WSA is to be installed on.
set -x
installerUser=$(stat -f '%Su' $HOME)
echo "installerUser is $installerUser"

# Create output log for install logging
scriptname=$(basename $0)
tempfilenosuffix=$(mktemp /tmp/${scriptname}.XXXXXX)
tempfile="$tempfilenosuffix.txt"
touch $tempfile
chmod 666 $tempfile
logfile="${tempfile}"

# This loop will parse through the passed parameters and write
# them to the install Users defaults as well as the root users.
# Information on the install will also be passed to the log file.
for i in "$@"
do
case $i in 
    --pkg=*)
    package="${i#*=}"
    echo "package is \"$package\""
    shift
    ;;
    -p=*|--pwd=*)
    password="${i#*=}"
    shift
    ;;
    --log=*)
    logfile="${i#*=}"
    shift
    ;;
    -*=*)
    parameter=${i#-}
    parameter=${parameter%=*}
    value=${i#*=}
    # Write to user defaults
    echo "defaults write group.com.webroot.wsa ${parameter} -string \"${value}\""
    echo "writing to user defaults"
    sudo -u ${installerUser} defaults write group.com.webroot.wsa ${parameter} -string "${value}"
    # Write to root user defaults
    echo "writing to root user defaults"
    defaults write group.com.webroot.wsa ${parameter} -string "${value}"
    shift
    ;;
esac
done

# Dump install information into the logfile.
sudo -u $installerUser defaults write group.com.webroot.wsa installerTempFile -string "${logfile}"
echo "dumping log to ${logfile}"

#Kick off install
installer -dumplog -verboseR -pkg "${package}" -target /  >> ${logfile} 2>&1
echo "install finished, printing postinstall output"
cat ${logfile}
exit 0
 
 
+Information regarding endpoint policy and agent language
Endpoint Policies
It is good to keep in mind policy settings when installing to a Mac. The system policy Recommended Defaults is configured to suppress the system tray icon and GUI. If this is the default policy for the site, once the computer checks in the agent will effectively disappear. This can make it more challenging to tell if Webroot is actually installed and running. You may want to modify the policy depending on your preferences. Click here for information on modifying endpoint policies.

Language
A language doesn't have to be chosen when installing the Webroot macOS agent. At the time of launch, the Webroot agent chooses the language based on the operating system settings. A KB article with more information on how agent language works is available.


If you need additional assistance installing the Webroot agent to macOS, please contact Support.
Is this article helpful?
   
Thanks for your feedback!

Powered by noHold, Inc. U.S. Patent No. 10,659,398
All Contents Copyright© 2024