Cisco Secure Client Umbrella - Create Jamf package
Umbrella
Download the Cisco Secure dmg
1
Download the Cisco Secure Client predeploy package from Umbrella Dashboard
2
Click "Deployments" > "Roaming Computers"
3
Click "Roaming Client"
4
Click "macOS" Predeploy Package; it will download to your Downloads folder
5
Click "Download Module Profile" to obtain the profile (OrgInfo.json file) as well
If you do not have access to the Cisco dashboard, you can download the dmg here: [cisco-secure-client-macos-5.1.1.42-predeploy-k9.dmg](https://parachutetechs-my.sharepoint.com/:u:/p/bburdick/EV6N_fdtm6FIpr9RgNWv200BpqDJvwuV4rEeCXU6zEqghw?e=bflZ3P)
Create the tmp Folder
6
Navigate to Private folder by going to Finder > "Go" > "Go to Folder" /private/
7
Right click anywhere and Click "New Folder"
8
Name it "tmp" (if a tmp file already exists, rename the old tmp file "tmp2").
9
In another Finder window, locate the "Cisco Secure predeploy" dmg (it should be in your Downloads folder). Double-click to mount it.
10
Click "Cisco Secure Client.pkg" from the dmg, and drag it to the newly created tmp folder
11
Click "Profiles" and drag to the "tmp" folder
Edit the Installer Files
12
Back in the tmp file, open the "ACTransformers.xml" file with text editor or another code editor of your choice
13
Delete everything above <Transforms> and uncomment if you do not wish to install VPN
14
It should look like this:
15
Delete all the folders under "Profiles" in the tmp folder
Create and Edit the Install_choices.xml File
16
Open Terminal and type in: [[installer -pkg "/private/tmp/Cisco Secure Client.pkg" -showChoiceChangesXML > \~/Downloads/install_choices.xml]]
The install_choices.xml is created and needs to be edited. This file will determine which modules are installed.
17
Open the install_choices.xml file by typing: [[open -e \~/Downloads/install_choices.xml]]
18
The **install_choices.xml** will open. In this case, set everything from "1" to "0", except Umbrella (1 will install, 0 will skip).
19
Save this tmp folder and all settings. You will not need to touch these files again. Only the OrgInfo.json file will be edited per client.
Customize the OrgInfo.json file
This step will need to be done for each client, as the parameters are unique for each client.
20
Navigate to [https://dashboard.umbrella.com/msp/8148079/#/customermanagement/customers](https://dashboard.umbrella.com/msp/8148079/#/customermanagement/customers)
21
Go to **Customer Management** > Find your client > Click the arrow.
22
Copy the unique "Fingerprint" and save it.
23
Copy the "Customer Id" and save it.
24
Open OrgInfo.json (in your Downloads folder) and enter the "Organization Id" and "fingerprint" (unique for each client), The User ID will not change per client.
25
Save the file.
26
Move the "install_choices.xml" and "OrgInfo.json" to the main "tmp" folder. It should look like this:
Create the pkg in Composer
27
Open the Jamf Composer app.
28
Drag the tmp folder to Jamf Comoser
29
It should look like this in Composer:
30
Right-click "Scripts"
31
Select **Add new script** > **shell script** > **postinstall**
32
Copy the script from here, step 7: [How to deploy Cisco Secure Client via JAMF (MacOS) – Cisco Umbrella](https://support.umbrella.com/hc/en-us/articles/23515921165844-How-to-deploy-Cisco-Secure-Client-via-JAMF-MacOS)
33
Delete the default postinstall script contents.
34
Paste the script you copied and save
35
Right-click the "Tmp" folder > Click "Rename tmp" and rename to "Cleintname-CiscoSecureClient"
36
Click to save the pkg to your desktop
37
Now, you will create the policy in Jamf. In the future, you only need to edit the OrgInfo.json and re-create the pkg in Composer per client.
Cisco Secure Client Umbrella - Create Jamf package
Umbrella
Download the Cisco Secure dmg
1
Download the Cisco Secure Client predeploy package from Umbrella Dashboard
2
Click "Deployments" > "Roaming Computers"
3
Click "Roaming Client"
4
Click "macOS" Predeploy Package; it will download to your Downloads folder
5
Click "Download Module Profile" to obtain the profile (OrgInfo.json file) as well
If you do not have access to the Cisco dashboard, you can download the dmg here: [cisco-secure-client-macos-5.1.1.42-predeploy-k9.dmg](https://parachutetechs-my.sharepoint.com/:u:/p/bburdick/EV6N_fdtm6FIpr9RgNWv200BpqDJvwuV4rEeCXU6zEqghw?e=bflZ3P)
Create the tmp Folder
6
Navigate to Private folder by going to Finder > "Go" > "Go to Folder" /private/
7
Right click anywhere and Click "New Folder"
8
Name it "tmp" (if a tmp file already exists, rename the old tmp file "tmp2").
9
In another Finder window, locate the "Cisco Secure predeploy" dmg (it should be in your Downloads folder). Double-click to mount it.
10
Click "Cisco Secure Client.pkg" from the dmg, and drag it to the newly created tmp folder
11
Click "Profiles" and drag to the "tmp" folder
Edit the Installer Files
12
Back in the tmp file, open the "ACTransformers.xml" file with text editor or another code editor of your choice
13
Delete everything above <Transforms> and uncomment if you do not wish to install VPN
14
It should look like this:
15
Delete all the folders under "Profiles" in the tmp folder
Create and Edit the Install_choices.xml File
16
Open Terminal and type in: [[installer -pkg "/private/tmp/Cisco Secure Client.pkg" -showChoiceChangesXML > \~/Downloads/install_choices.xml]]
The install_choices.xml is created and needs to be edited. This file will determine which modules are installed.
17
Open the install_choices.xml file by typing: [[open -e \~/Downloads/install_choices.xml]]
18
The **install_choices.xml** will open. In this case, set everything from "1" to "0", except Umbrella (1 will install, 0 will skip).
19
Save this tmp folder and all settings. You will not need to touch these files again. Only the OrgInfo.json file will be edited per client.
Customize the OrgInfo.json file
This step will need to be done for each client, as the parameters are unique for each client.
20
Navigate to [https://dashboard.umbrella.com/msp/8148079/#/customermanagement/customers](https://dashboard.umbrella.com/msp/8148079/#/customermanagement/customers)
21
Go to **Customer Management** > Find your client > Click the arrow.
22
Copy the unique "Fingerprint" and save it.
23
Copy the "Customer Id" and save it.
24
Open OrgInfo.json (in your Downloads folder) and enter the "Organization Id" and "fingerprint" (unique for each client), The User ID will not change per client.
25
Save the file.
26
Move the "install_choices.xml" and "OrgInfo.json" to the main "tmp" folder. It should look like this:
Create the pkg in Composer
27
Open the Jamf Composer app.
28
Drag the tmp folder to Jamf Comoser
29
It should look like this in Composer:
30
Right-click "Scripts"
31
Select **Add new script** > **shell script** > **postinstall**
32
Copy the script from here, step 7: [How to deploy Cisco Secure Client via JAMF (MacOS) – Cisco Umbrella](https://support.umbrella.com/hc/en-us/articles/23515921165844-How-to-deploy-Cisco-Secure-Client-via-JAMF-MacOS)
33
Delete the default postinstall script contents.
34
Paste the script you copied and save
35
Right-click the "Tmp" folder > Click "Rename tmp" and rename to "Cleintname-CiscoSecureClient"
36
Click to save the pkg to your desktop
37
Now, you will create the policy in Jamf. In the future, you only need to edit the OrgInfo.json and re-create the pkg in Composer per client.
