Endpoint Security Management: How to Centralize & Control Risks.

Endpoint Security VPN: Securing Remote Access.

What is Endpoint Security as a Service?.

Sophos Endpoint Protection: EPP, EDR, and XDR Explained.

ESET Endpoint Protection Advanced: Quick Solution Overview.

Microsoft Defender for Endpoint: Features and Capabilities.

Kaspersky Endpoint Security for Business: 4 Key Capabilities.

Check Point Endpoint Security: Quick Solution Overview.

What Is Next-Gen Antivirus (NGAV) & AV/EDR/XDR Comparison.

What Is Endpoint Management? MDM, EMM, and UEM.

Some vendors like to not publish PKGs on their website (because they want to 'control the installation experience' or some other lame excuse to invent their own installer) but do provide one upon request.

PS: Pushing your third-party vendor to provide a proper PKG can also yield results occasionally. This means you will have to set up your own distribution server etc so it's more involved but it is more reliable. However we did have consistent reliability issues around LOB distribution so we went and did it by scripts instead. You can also click on the 'lock' on the top-right of the installer but in my experience this only shows whether it's been signed, I don't think you can see notarisation status there. To check if you did everything correctly, use Suspicious Package:

Then you wait for an email to come in saying it was successful (or if not, why, it'll tell you to run a command to retrieve the logfile)Īnd it will 'staple' Apple's notarisation to it. This will upload the PKG to apple and it will inspect it on their server farm. Xcrun altool -notarize-app -f '' -primary-bundle-id -username -password -asc-provider

And don't use the old '3rd party mac developer installer' certificate type, you can't notarise those.īasically, after signing you need to run 2 commands to notarise it: Only your developer team owner can create those! But besides that they're no more difficult than any other type. You indeed need to have a cert of the type 'Developer ID Installer'. So signing you can do with whitebox packages, or with the command: It can also sign them but not notarise (at least not when I used it). I used Whitebox Packages to build the PKGs. I built a script to do the signing and notarisation. generally I like to preconfigure things to our environment, like license keys, server names etc. I found that most third party apps have some kind of need to repackage them because many of them are really poorly packaged for automated distribution. You can build your own PKG and sign and notarise it.

Sophos endpoint protection mac