Addigy provides many options for installing third-party software including Webroot security software. To install Webroot silently, you must already have valid Webroot license keys.
With the advent of macOS 10.13 High Sierra, Apple introduced User Approved Kernel Extension Loading (UAKEL). This means that kernel extensions (also called kexts or security extensions) must be approved before they can be installed. To learn more about UAKEL, see some of Apple's documentation: Technical Note TN2459: User-Approved Kernel Extension Loading.
Because Webroot requires kexts to be installed, you will need to configure an MDM Profile and MDM Configuration for Kernel Extension Whitelist to bypass the user dialog that is normally required to approve a kext. For instructions on enabling these features within Addigy, see our support article: Addigy Mobile Device Management (MDM) Integration and Approved MDM Profiles.
If a valid Kernel Extension Whitelist has been deployed before installing the software, then users will not be prompted to approve any security extension and the installation will be completely silent.
To install Webroot, create new Custom Software within Addigy. For more information on how to set up a Custom Software, see our support article: Creating Custom Software.
Here is the necessary Installation script for your Custom Software:
curl -o /tmp/wsamacsme.dmg http://anywhere.webrootcloudav.com/zerol/wsamacsme.dmg hdiutil attach -nobrowse /tmp/wsamacsme.dmg cp -R "/Volumes/Webroot SecureAnywhere/Webroot SecureAnywhere.app" /Applications/ diskutil unmount "/Volumes/Webroot SecureAnywhere" "/Applications/Webroot SecureAnywhere.app/Contents/MacOS/Webroot SecureAnywhere" install -keycode="YOUR-LICENSE-KEY-HERE" -language=en -silent rm -rf /tmp/wsamacsme.dmg
Note: Replace the "YOUR-LICENSE-KEY-HERE" text with your valid license key within line 5 of the provided install script above.
Because the script handles downloading the latest version of Webroot, no files need to be uploaded to this Custom Software.
Adding a Condition Script
Additionally, a Condition script can be added so that this software is enforced on a recurring basis as part of an Addigy policy.
Here is a simple Condition script that checks for the Webroot application on the device:
if [ -d "/Applications/Webroot SecureAnywhere.app" ]; then echo "Webroot already installed. Skipping installation." exit 1 else echo "Webroot not found. Installing..." exit 0 fi
Note: this Condition script assumes that the Install on Success setting is toggled ON.
If you have followed this guide for installing Webroot, and are experiencing issues during the installation or would like someone to review your Custom Software before deploying it, please reach out to the Addigy Support team for additional help.