ConfigCID Support for non Windows CIDs

Whoops, not a good idea to post this on my phone. Her it is again in readable format :smileyhappy:

This is a two part process and the outcome will be a full offline mpkg with the avrelay details inside along with the, auto update locations, encrypted credentials for auto autopdate and the scanning preferences.

Part 1- Changing the mrinit.conf

1.Create a folder called Installs in /Temp. Grab sophos from server share to a mac and put it in /Temp/Installs

2.Purchase composer from JAMF software this is an invaluable tool for packaging and can be purchased individually from the suite and is inexpensive.

3.Drag the /Temp/Installs in to the composer window and click on the convert to source button.

4. In the search box type mrinit.conf and the program will search for the location where it is.

5. I'm going by memory to the location of mrinit.conf so I apologise if this is incorrect

Open terminal, elevate to root user and type

vi /Library/Application\ Support/JAMF/Composer/Sources/Installs/ROOT/Temp/Installs/Sophos\ Anti-Virus.mpkg/Contents/Packages/SophosRMS.pkg/Contents/Resources/mrinit.conf

6.Press key I to go in to insert mode

Change the av relay address by using the arrow key to go down to the bottom line and delete your current entry and input your desired relay address but still keep it with the quotes and press enter so there line underneath

Press escape to come out of insert mode

Hold the shift key and press : key

Type wq! To save the changes and press enter.

7. In composer click build package and save it to the desktop and it will be called Installs.pkg

8. Right click on Installs.pkg and select show package contents and double click Archive.pax which will uncompress the files and you can then move the uncompressed Sophos Anti-Virus.mpkg to the Desktop etc. This is the file with the modified mrinit.conf

Part 2 - test machine

Just using the package with the modified mrinit.conf is not enough because if you just use this and install it on a machine the scanning and autoupdate credentials will be blank and is not any good if you are needing an offline installer.

What you can do however is to install the package on a test machine, make your changes in regards to the scanning settings ie Scan inside Archived files and set the autoupdate locations and credentials.

1. Install the Newly created Sophos Anti-Virus.mpkg to a test machine.

2. Make your changes to the update locations, credentials and scanning settings

3. Copy /Library/Preferences/com.sophos.sau.plist to usb key etc

4. Copy /Library/Preferences/com.sophos.sav.plist to usb key etc

5. Got back to you machine with composer. With composer open, on the right hand side you can expand all the directories to add files in there.

6. In Composer from the top expand /Temp/Installs/Sophos Anti-Virus.mpkg/Contents/Packages/SophosAU.pkg/Contents/Resources/

7. Copy the com.sophos.sau.plist to that location.

8. Change the permissions of the com.sophos.sau.plist to match the other file permissions in that location I think it was owner root:admin 700. You can do this in an interface on composer.

9. In Composer from the top expand /Temp/Installs/Sophos Anti-Virus.mpkg/Contents/Packages/SophosAV.pkg/Contents/Resources/

10. Copy the com.sophos.sav.plist to that location.

11. Change the permissions of the com.sophos.sav.plist to match the other file permissions in that location I think it was  owner root:admin 700. You can do this in an interface on composer.

12. Rename the Package in Composer to some thing else so you will not get confused eg Relay_Sophos_Anti-Virus_v1.0

13. Build the package Relay_Sophos_Anti-Virus_v1.0 and save it to the desktop

14. Right click on the Relay_Sophos_Anti-Virus_v1.0.pkg on the desktop and select show package contents.

15. Double click the Archive.pax and this should uncompress and you can then drill down and copy the newly created Sophos Anti-Virus.mpkg you might want to rename it to something unique before copying and pasting to the desktop to avoid confusion.

16. Done you now have a full Sophos Anti-Virus.mpkg with the relay, auto update encryped credentials and scanning settings.

PS

Definitely the full CasperSuite is worth looking in to and worth it. The guys at JAMF Software are geniuses!

Whoops, not a good idea to post this on my phone. Her it is again in readable format :smileyhappy:

This is a two part process and the outcome will be a full offline mpkg with the avrelay details inside along with the, auto update locations, encrypted credentials for auto autopdate and the scanning preferences.

Part 1- Changing the mrinit.conf

1.Create a folder called Installs in /Temp. Grab sophos from server share to a mac and put it in /Temp/Installs

2.Purchase composer from JAMF software this is an invaluable tool for packaging and can be purchased individually from the suite and is inexpensive.

3.Drag the /Temp/Installs in to the composer window and click on the convert to source button.

4. In the search box type mrinit.conf and the program will search for the location where it is.

5. I'm going by memory to the location of mrinit.conf so I apologise if this is incorrect

Open terminal, elevate to root user and type

vi /Library/Application\ Support/JAMF/Composer/Sources/Installs/ROOT/Temp/Installs/Sophos\ Anti-Virus.mpkg/Contents/Packages/SophosRMS.pkg/Contents/Resources/mrinit.conf

6.Press key I to go in to insert mode

Change the av relay address by using the arrow key to go down to the bottom line and delete your current entry and input your desired relay address but still keep it with the quotes and press enter so there line underneath

Press escape to come out of insert mode

Hold the shift key and press : key

Type wq! To save the changes and press enter.

7. In composer click build package and save it to the desktop and it will be called Installs.pkg

8. Right click on Installs.pkg and select show package contents and double click Archive.pax which will uncompress the files and you can then move the uncompressed Sophos Anti-Virus.mpkg to the Desktop etc. This is the file with the modified mrinit.conf

Part 2 - test machine

Just using the package with the modified mrinit.conf is not enough because if you just use this and install it on a machine the scanning and autoupdate credentials will be blank and is not any good if you are needing an offline installer.

What you can do however is to install the package on a test machine, make your changes in regards to the scanning settings ie Scan inside Archived files and set the autoupdate locations and credentials.

1. Install the Newly created Sophos Anti-Virus.mpkg to a test machine.

2. Make your changes to the update locations, credentials and scanning settings

3. Copy /Library/Preferences/com.sophos.sau.plist to usb key etc

4. Copy /Library/Preferences/com.sophos.sav.plist to usb key etc

5. Got back to you machine with composer. With composer open, on the right hand side you can expand all the directories to add files in there.

6. In Composer from the top expand /Temp/Installs/Sophos Anti-Virus.mpkg/Contents/Packages/SophosAU.pkg/Contents/Resources/

7. Copy the com.sophos.sau.plist to that location.

8. Change the permissions of the com.sophos.sau.plist to match the other file permissions in that location I think it was owner root:admin 700. You can do this in an interface on composer.

9. In Composer from the top expand /Temp/Installs/Sophos Anti-Virus.mpkg/Contents/Packages/SophosAV.pkg/Contents/Resources/

10. Copy the com.sophos.sav.plist to that location.

11. Change the permissions of the com.sophos.sav.plist to match the other file permissions in that location I think it was  owner root:admin 700. You can do this in an interface on composer.

12. Rename the Package in Composer to some thing else so you will not get confused eg Relay_Sophos_Anti-Virus_v1.0

13. Build the package Relay_Sophos_Anti-Virus_v1.0 and save it to the desktop

14. Right click on the Relay_Sophos_Anti-Virus_v1.0.pkg on the desktop and select show package contents.

15. Double click the Archive.pax and this should uncompress and you can then drill down and copy the newly created Sophos Anti-Virus.mpkg you might want to rename it to something unique before copying and pasting to the desktop to avoid confusion.

16. Done you now have a full Sophos Anti-Virus.mpkg with the relay, auto update encryped credentials and scanning settings.

PS

Definitely the full CasperSuite is worth looking in to and worth it. The guys at JAMF Software are geniuses!