Addigy provides many options for installing third-party software including Webroot security software. To install Webroot silently, you must already have valid Webroot license keys.

Before Installing

With the advent of macOS 10.13 High Sierra, Apple introduced User Approved Kernel Extension Loading (UAKEL). This means that kernel extensions (also called kexts or security extensions) must be approved before they can be installed. To learn more about UAKEL, see some of Apple's documentation: Technical Note TN2459: User-Approved Kernel Extension Loading.

Because Webroot requires kexts to be installed, you will need to configure an MDM Profile and MDM Configuration for Kernel Extension Whitelist to bypass the user dialog that is normally required to approve a kext. For instructions on enabling these features within Addigy, see our support article: Addigy Mobile Device Management (MDM) Integration and Approved MDM Profiles.

If a valid Kernel Extension Whitelist has been deployed before installing the software, then users will not be prompted to approve any security extension and the installation will be completely silent.

Installing Webroot

To install Webroot, create new Custom Software within Addigy. For more information on how to set up a Custom Software, see our support article: Creating Custom Software.

Here is the necessary Installation script for your Custom Software:

#set -x
export TERM=xterm

#Set Keycode for Clients


OSXVER=$(sw_vers -productVersion | cut -d"." -f2)

sleep 2


#Download WSA mac client

#cd /tmp

#Catalina 10.15.* has a different download link
if (($OSXVER >= "15")); then
cd /tmp;curl -O
#Mount the DMG file for 10.15.* and up
hdiutil attach -nobrowse /tmp/WSAMACSME.dmg
cd /tmp;curl -O
#Mount the DMG file for 10.14.* and under
hdiutil attach -nobrowse /tmp/wsamacsme.dmg

echo Please wait while file is downloaded and mounted

#copy app from dmg to applications
ditto /Volumes/Webroot\ SecureAnywhere/ /Applications/

#run silent install
#Catalina 10.15.* has a different file path to installer
if (($OSXVER >= "15")); then
sudo "/Applications/Webroot" install -keycode=$KEY -language=en -silent
sudo "/Applications/Webroot SecureAnywhere" install -keycode=$KEY -language=en -silent

echo unmounting

#Unmount the DMG

diskutil list | grep Webroot\ SecureAnywhere | sudo hdiutil detach /Volumes/Webroot\ SecureAnywhere

echo done

Note: Replace the {ENTER KEY HERE} text with your valid license key in the provided install script above.

Because the script handles downloading the latest version of Webroot, no files need to be uploaded to this Custom Software.

Adding a Condition Script

Additionally, a Condition script can be added so that this software is enforced on a recurring basis as part of an Addigy policy.

Here is a simple Condition script that checks for the Webroot application on the device:

if [ -d "/Applications/Webroot" ]; then
    echo "Webroot already installed. Skipping installation."
    exit 1
    echo "Webroot not found. Installing..."
    exit 0

Note: this Condition script assumes that the Install on Success setting is toggled ON.

If you have followed this guide for installing Webroot, and are experiencing issues during the installation or would like someone to review your Custom Software before deploying it, please reach out to the Addigy Support team for additional help.