Creating a Symantec Endpoint Protection package for Munki

Thanks to Erik from the Munki Dev group for the tip.

If you have a newer version of Symantec Endpoint Protection (SEP) that comes as an .app with a separate Additional Resources folder, here is how you can get a Munki-friendly package out of it.

munkisep01
Go ahead and launch up the installer .app file.

munkisep02
Click Continue when prompted.

munkisep03
Don't proceed any further with the installation. Instead, click on the Tool menu and select Create remote deployment package.

munkisep04
Give the package a name and save it to wherever you can find it later.

munkisep05
Then, click OK when you're done and quit out of the installer.

You should then be able to use munkiimport to import the new .pkg file into your Munki repository.

If you're upgrading from an older version of SEP, you may have to adjust what Munki is looking for (otherwise, it will see the com.remote.deploy receipt with version 0 and think the newest version is already installed).

An installs array works well for this (here's an example based on

makepkginfo -f /Applications/Symantec\ Solutions/Symantec\ Endpoint\ Protection.app
output):
<key>installs</key>
<array>
<dict>
<key>CFBundleIdentifier</key>
<string>com.symantec.sep.mainapp</string>
<key>CFBundleName</key>
<string>Symantec Endpoint Protection</string>
<key>CFBundleShortVersionString</key>
<string>14.0.2415.0200</string>
<key>CFBundleVersion</key>
<string>12</string>
<key>minosversion</key>
<string>10.6</string>
<key>path</key>
<string>/Applications/Symantec Solutions/Symantec Endpoint Protection.app</string>
<key>type</key>
<string>application</string>
<key>version_comparison_key</key>
<string>CFBundleShortVersionString</string>
</dict>
</array>

Leave a Reply

Your email address will not be published. Required fields are marked *