Install macOS Roaming Client using NinjaOne
đ¨ Important: Due to security changes in macOS Sequoia (OS 15), the instructions on this page may no longer apply to Roaming Client version 2.2.0 and above. These methods are no longer officially supported.
If you've successfully deployed the macOS Roaming Client v2.2.0+ using an RMM or MDM tool under these new conditions, we encourage you to share your steps in the Community to help others navigating similar setups.
This post highlights how to install the macOS Roaming Client through the RMM tool NinjaOne (formerly Ninja RMM). Confirm the managed devices run on OS 11 or higher.
What you need from DNSFilterÂ
- Setup a network Site to associate with the agents. Make sure to assign the appropriate Filtering Policy and Block Page to the Site
- The Site Secret Key (SSK) from the Roaming Client Install tab
- Create the script below to download and install the macOS Roaming Client:#!/bin/sh
curl https://download.dnsfilter.com/User_Agent/MacOS/DNSFilter%20Agent-Installer.pkg -o /tmp/DNSFilter%20Agent-Installer.pkg
cd /tmp && echo INSERTYOURSITESECRETKEYHERE > dns_agent_site_key && sudo installer -dumplog -pkg DNSFilter%20Agent-Installer.pkg -target / -
Add the SSK to the script
INSERTYOURSITESECRETKEYHERE
line
NinjaOne Specifications
- Add the macOS Roaming Client following ninjaOne's software installation via script instructions
- Once the script is added to ninjaOne, edit the Policy to Add a Scheduled Script
- Set the schedule to Run Once Immediately
- Add the agent scriptÂ
- In the Run As field, select System
- Select Apply and Add
- Save the Policy edits
NinjaOne will now run the installation script on the devices attached to the Policy.Â
-
This is still showing an error when attempting to install on OSX 15.0.1 Sequoia. "installer: Install failed: The install was canceled because the application integrity could not be verified."Â
My understanding is that this was to be fixed with version 1.8.6 which should be what we are deploying. However, it doesn't seem to work.Â
A manual install of the installer via the GUI DOES work. Something is wrong with the silent install.0 -
Jason Rybicki It looks like the issue you're encountering is related to an older version of the install script. The previous version included a parameter
-store
that is no longer valid and doesn't work starting with macOS Sequoia. We've opened a support ticket for you to investigate this further, but in the meantime, you may want to check if that parameter is present and remove it from your script.Let me know if you need any further assistance!
0 -
Hello All,Â
I have been throught the ringer on this one and have found what works with Ninja RMM deployment via ShellScript. Below are two different approaches for the same result, DNS Filter agent installing on a Mac based OS. Please note: The above script from DNS Filter has âcd /tmp && echo etcâŚâ on the same line, this was causing issues for me when attempting to install, resulting in a generic failed to install error.Â
Both of the below methods will result in DNS Filter Agent being installed on a MacOS device. When using Global Custom Fields, please make sure you are selecting the âSecure Fieldâ option as this will prevent anyone without proper access from being able to view the Site Key and when running the ./ninjarmm-cli get <GlobalCustomFieldName> command you will get a message stating it is only viewable when running from an automation script.Â
Â
1. Install with Global Custom Field variable call from Secure Field
cd /Applications/NinjaRMMAgent/programdata
export SKEY=$(./ninjarmm-cli get dnsfilterSecureKey)
echo $SKEY
curl https://download.dnsfilter.com/User_Agent/MacOS/DNS%20Agent-Installer.pkg -o /tmp/DNSAgent-Installer.pkg
cd /tmpÂ
echo $SKEY > dns_agent_site_key && sudo installer -dumplog -pkg DNSAgent-Installer.pkg -target /Â
2. Install with Plain Text hardcoded Site Key (Not advised as it's left in the script in plain text)
cd /Applications/NinjaRMMAgent/programdata
curl https://download.dnsfilter.com/User_Agent/MacOS/DNS%20Agent-Installer.pkg -o /tmp/DNSAgent-Installer.pkg
cd /tmpÂ
echo âYour Site Key Hereâ > dns_agent_site_key && sudo installer -dumplog -pkg DNSAgent-Installer.pkg -target /0
Please sign in to leave a comment.
Comments
3 comments