Addigy provides many options for installing third-party software including Webroot security software. To install Webroot silently, you must already have valid Webroot license keys.


Before Installing

With the advent of macOS 10.13 High Sierra, Apple introduced User Approved Kernel Extension Loading (UAKEL). This means that kernel extensions (also called kexts or security extensions) must be approved before they can be installed. To learn more about UAKEL, see some of Apple's documentation: Technical Note TN2459: User-Approved Kernel Extension Loading.


Because Webroot requires kexts to be installed, you will need to configure an MDM Profile and MDM Configuration for Kernel Extension Whitelist to bypass the user dialog that is normally required to approve a kext. For instructions on enabling these features within Addigy, see our support article: Addigy Mobile Device Management (MDM) Integration and Approved MDM Profiles.


If a valid Kernel Extension Whitelist has been deployed before installing the software, then users will not be prompted to approve any security extension and the installation will be completely silent.


Installing Webroot

To install Webroot, create new Custom Software within Addigy. For more information on how to set up a Custom Software, see our support article: Creating Custom Software.


Here is the necessary Installation script for your Custom Software:


#!/bin/sh
#set -x

#Set Keycode for Clients

KEY={ENTER KEY HERE}

sleep 2

clear

#Download WSA mac client

cd /tmp; curl -O http://anywhere.webrootcloudav.com/zerol/wsamacsme.dmg

echo Please wait while file is downloaded and mounted

wait 15

#Mount the DMG file

hdiutil attach /tmp/wsamacsme.dmg

#copy app from dmg to applications

ditto /Volumes/Webroot\ SecureAnywhere /Applications/

wait 10

#run silent install 

sudo "/Applications/Webroot SecureAnywhere.app/Contents/MacOS/Webroot SecureAnywhere" install -keycode=$KEY -silent

wait 30

#Unmount the DMG

diskutil list | grep Webroot\ SecureAnywhere | diskutil unmount /Volumes/Webroot\ SecureAnywhere


Note: Replace the {ENTER KEY HERE} text with your valid license key in the provided install script above.


Because the script handles downloading the latest version of Webroot, no files need to be uploaded to this Custom Software.


Adding a Condition Script

Additionally, a Condition script can be added so that this software is enforced on a recurring basis as part of an Addigy policy.


Here is a simple Condition script that checks for the Webroot application on the device:


if [ -d "/Applications/Webroot SecureAnywhere.app" ]; then
    echo "Webroot already installed. Skipping installation."
    exit 1
else
    echo "Webroot not found. Installing..."
    exit 0
fi


Note: this Condition script assumes that the Install on Success setting is toggled ON.


If you have followed this guide for installing Webroot, and are experiencing issues during the installation or would like someone to review your Custom Software before deploying it, please reach out to the Addigy Support team for additional help.