˄˅

Remote installation

Before installation

Before installing ESET Endpoint Antivirus for macOS on macOS 10.13 and later, enable ESET kernel extensions. Also, on macOS 10.14 and later, enable full disk access on targeted computers. If these options are enabled after the installation, users will receive System extensions blocked and Your computer is partially protected notifications until ESET kernel extensions and full disk access is enabled.

To enable ESET kernel extensions and full disk access remotely, your computer must be enrolled with an MDM (Mobile Device Management) server, such as Jamf.

Enable ESET system extensions

To remotely enable kernel extensions on your device, download the .plist configuration profile. Generate two UUIDs with a UUID generator of your choice and use a text editor to replace strings with the appropriate text insert your UUID 1 here and insert your UUID 2 here in the downloaded configuration profile. Deploy the .plist configuration profile file using the MDM server. Your computer must be enrolled in the MDM server to deploy configuration profiles to those computers.

Enable full disk access

On macOS 10.14, you will receive the Your computer is partially protected notification from ESET Endpoint Antivirus for macOS after installation. To access all ESET Endpoint Antivirus for macOS functions and prevent the notification from appearing, you must enable Full disk access to ESET Endpoint Antivirus for macOS before installing the product. To enable Full disk access remotely:

oDownload the .plist configuration file. Generate two UUIDs with a UUID generator of your choice and use a text editor to replace strings with the text insert your UUID 1 here and insert your UUID 2 here in the downloaded configuration profile. Deploy the .plist configuration profile file using the MDM server. Your computer must be enrolled in the MDM server to deploy configuration profiles to those computers.

After allowing full disk access and system extensions remotely, in System Preferences > Security & Privacy, these settings might appear disabled. If ESET Endpoint Antivirus for macOS does not display any warnings, full disk access and system extensions are allowed, regardless of their status in System Preferences > Security & Privacy.

macOS Big Sur (11) and newer

Before installing ESET Endpoint Antivirus for macOS on macOS Big Sur, you must enable the following settings on targeted computers:

oESET system extensions
If ESET system extensions are not enabled before the installation, users will receive System extensions blocked notifications until the ESET system extensions are enabled.

oFull disk access
If full disk access is not enabled before the installation, users will receive Your computer is partially protected notifications until full disk access is enabled.

oWeb access protection
For Web access protection to function, you must add the Web access protection configuration to system settings.
If the Web access protection configuration is missing after the ESET Endpoint Antivirus for macOS installation, users will receive "ESET Endpoint Antivirus for macOS" Would Like to Filter Network Content. When they receive this notification, click Allow. If they click Don't Allow, Web Access Protection will not work.

To remotely enable the above ESET settings, your computer must be enrolled with an MDM (Mobile Device Management) server, such as Jamf.

Enable ESET system extensions

To enable system extensions on your device remotely, perform one of the following actions before the installation:

oDownload the .plist configuration profile. Deploy the .plist configuration profile file using your MDM service.

oCreate your own configuration profile in your MDM, using the following settings:

Team identifier (TeamID)	P8DQRXPVLP
Bundle identifier (BundleID)	com.eset.endpoint com.eset.network com.eset.firewall com.eset.devices

Enable full disk access

To enable full disk access remotely, perform one of the following actions before the installation:

oDownload the .plist configuration file. Deploy the .plist configuration profile file using your MDM service.

oCreate your own configuration profile using the following settings:

ESET Endpoint Antivirus
Identifier	com.eset.eea.6
Identifier Type	bundleID
Code Requirement	identifier "com.eset.eea.6" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = P8DQRXPVLP
App or Service	SystemPolicyAllFiles
Access	Allow

ESET Endpoint Antivirus & ESET Endpoint Security
Identifier	com.eset.devices
Identifier Type	bundleID
Code Requirement	identifier "com.eset.devices" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = P8DQRXPVLP
App or Service	SystemPolicyAllFiles
Access	Allow

ESET Endpoint Antivirus & ESET Endpoint Security
Identifier	com.eset.endpoint
Identifier Type	bundleID
Code Requirement	identifier "com.eset.endpoint" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = P8DQRXPVLP
App or Service	SystemPolicyAllFiles
Access	Allow

Web access protection

To add Web access protection configuration to system settings remotely, perform one of the following actions before the installation:

oDownload the .plist configuration file. Deploy the .plist configuration profile file using the MDM server. Your computer must be enrolled in the MDM server to deploy configuration profiles to those computers.

oTo create your own configuration profile, create a VPN type configuration profile with the following settings:

VPN type	VPN
Connection type	Custom SSL
Identifier Identifier for the custom SSL VPN	com.eset.sysext.manager
Server	localhost
Provider Bundle Identifier	com.eset.network
User authentication	Certificate
Provider Type	App-proxy
Provider Designated Requirement	identifier "com.eset.network" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = P8DQRXPVLP
Enable VPN on Demand	✓
On Demand Rules Configuration XML	<array> <dict> <key>Action</key> <string>Connect</string> </dict> </array>
Idle Timer	Do not disconnect
Proxy Setup	Manual
Proxy Server And Port	localhost : 57856

Installation

Before installation, you can create a remote installation package with a preset ESET Endpoint Antivirus for macOS configuration that you can later deploy using the ESET PROTECT product or MDM of your choice.

Create a remote installation package. Install ESET Endpoint Antivirus for macOS remotely by creating a software install task using the ESET management system:

oSoftware install task ESET PROTECT

oSoftware install task ESET Security Management Center

˄˅