Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. Join us in person at the ninth annual Jamf Nation User Conference (JNUC) this November for three days of learning, laughter and IT love.

TrendMicro Worry-Free Security Services WFBS Package Creation

Hello JAMF Nation,

Has anyone been able to successfully create and package with the WFBS Trend client to be pushed out via policy in JAMF every single attempt I have made as resulted in failure or corrupted installations.

I have found several posts here, that have helped with potential ideas but unable to get anything going successfully.

Keep in mind I am a JAMF NOOB but am learning more and more each day. I have 30 machines that are out in the field and have been tasked to creating packages for:

  • Skype for Business
  • WFBS TrendMicro

That are a bit of a challenge any assistance would be greatly appreciated.

Thank You

Like Comment
Order by:
SOLVED Posted: by mm2270

Hi there. I can't offer any help with the TrendMicro package, but I can tell you that Skype for Business already comes in a handy package format ready for deployment through Jamf or any other management tool that can push .pkg installers. No need to create anything for it.
You can grab the latest installer for it here: https://macadmins.software

Like
SOLVED Posted: by CorpIT_eB

@mm2270 Thanks yes I was able to get Skype going last night just need to figure out trend.

Thank You.

Like
SOLVED Posted: by discounteggroll

@CorpIT_eB I have a policy that installs trend micro via 2 packages.

The first package installs the identifier.plist (which has a custom string you need to set prior to packing up). Use composer to package this up at /var/tmp/TrendMicro. The seconds package in the policy is the WFBS-SVC_Agent_Installer.pkg.

Like
SOLVED Posted: by CorpIT_eB

@discounteggroll That would be great to try the problem I am having as a NOOB i have never really dabbled with plists so a small step by step in your part would go a really long way so I can start to understand what future application deployments will look like. Unfortunately I am a visual and hands on learner.

Also thank you so much for replying.

Like
SOLVED Posted: by mack525

@CorpIT_eB Give This page a look I typed up some things on how we deploy trend. Tricky thing is that machine GUID. Trend has to be able to not only register each device but assign an individual GUID. Take a look and let me know if you like some better documentation. I know sharing is caring :)

Like
SOLVED Posted: by CorpIT_eB

@mack525 I actually read this post a couple days back and attempted to try this but was uncertain on how you composed it all. The WFBS Installer is already a .dmg so what did you do to modify it. And set in the Var directory's like mentioned in step one.

Did you use JAMF Composer snapshots to create another .dmg?

I saw that you even listed an option for uninstallation as well very cool.

let me know if you like some better documentation.

Most definitely "Hook a brother up" this thing has taken way to long to mass deploy on my macs. I would greatly appreciate it.

Like
SOLVED Posted: by mack525

@CorpIT_eB I did use JAMF Composer to package this. What we found was Trend's documentation for mass deployment needed a little T.L.C for JAMF. I'll break down the steps we took to get this working for us.

  1. Used Composer to package the WFBS Installer .pkg file i received from the web console and dropped it /var/tmp/TrendMicro directory. Make sure this is composed as .dmg with (FUT) & (FEU) selected
  2. Next, in order for Trend to register/update the correct virus patterns each machine to your web console, you will need to drop a .plist file. Take a look at this link on how to get the that identifier. Identifier script should be set to run "After"
  3. Lastly i added a "Files and Processes" Execute Command within that same policy
  4. Should be all you need. We have ours in Self Service and have not had any issues. if you have machines that had Trend installed, i would recommend adding an uninstall script in front of this. Heres how the final the policy looks.
Like
SOLVED Posted: by CorpIT_eB

@mack525 Man this is perfect but I am using Composer 10.11.0 when I download the WFBS installer and I open Composer how do I create the .dmg file without the snapshot I would have to create a snapshot first to accomplish this correct?

Like
SOLVED Posted: by mack525

@CorpIT_eB Yes. You can run a snapshot and then modify it.

Like
SOLVED Posted: by CorpIT_eB

@mack525 I am apologize man can you give me a bit of clarity on how you got your results on step one.

On my end when I open composer (using snapshot) I take the installer and drop into /var/tmp/TrendMicro (had to create this folder) from there I ran the installer and then capture but when it comes back to me the sources reads user, libarary, users, applications do I delete or modify any of these files as the user here is clearly not the user that would be on future machines.

From here build a .dmg and then?

If you have a simpler way of doing it please let me know I think if I get this final piece of the puzzle I might be able to get this working on our end as well.

Thank you for everything!!

Like
SOLVED Posted: by mm2270

No need for a snapshot for that.
Just open /private/tmp/ in the Finder and create a folder in it called "TrendMicro" and then copy the installer into it. Then in Composer, drag the "TrendMicro" folder (not the .pkg) into Composer's sidebar and it will copy it in and create a new source. Done.

Also, it shouldn't be a requirement to build it as a dmg since it's just dropping the pkg into that location. Unless it's just not shown in your screenshots, I don't see anything that would need the FEU or FUT options enabled. A package style installer will also do the job, but either one should work fine for this.

Like
SOLVED Posted: by mack525

What the all mighty@mm2270 said :)

Also, i built it as a DMG because i had previous installations with the same sort of files and wanted them replaced with these correct ones within the directory.

Like
SOLVED Posted: by CorpIT_eB

@mack525 Yep I got Skype working just need Trend and Parallels and I am all set on Deployments for now.

I am going to try your method test and get back to you I really appreciate all your help on this one.

Like
SOLVED Posted: by CorpIT_eB

@mack525 Toss me you a screen shot of you your Uninstaller script as well so I can save it for the future.

Like
SOLVED Posted: by CorpIT_eB

@mack525 The Uninstaller script works flawlessly.

However the installation portion of it still fails to complete. (No ERRORS) && No Trend Icon or Application in site.

#!/bin/bash

IDENTIFIER="pulled from trend"

rm /var/tmp/TrendMicro/Identifier.plist > /dev/null
mkdir /var/tmp/TrendMicro > /dev/null

cat > /var/tmp/TrendMicro/Identifier.plist << EOF
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
   <dict>
      <key>Identifier</key>
      <string>Your Identifier</string>
   </dict>
</plist>
EOF

Details

Executing Policy WFBS TrenMicro Installation
Downloading https://use1-jcds.services.jamfcloud.com//download/19727f945eb74fb797d9d257fa52498e/TrendMicro.dmg?token=downloadsatoken
Verifying DMG...
Verifying package integrity...
Installing TrendMicro.dmg...
Closing package...
Running script TrendMicro Installation...
Script exit code: 0
Script result: rm: /var/tmp/TrendMicro/Identifier.plist: No such file or directory
mkdir: /var/tmp/TrendMicro: File exists
Running command installer -verbose -pkg /var/tmp/TrendMicro/WFBS-SVC_Agent_installer.pkg -target /...
Result of command:
installer: Package name is Trend Micro Security Agent
installer: Upgrading at base path /
installer: Preparing for installation….....
installer: Preparing the disk….....
installer: Preparing Trend Micro Security Agent….....
installer: Waiting for other installations to complete….....
installer: Configuring the installation….....
installer:

installer: Writing files….....

installer: Running package scripts….....

installer: Running package scripts….....

installer: Running package scripts….....

installer: Running package scripts….....

installer: Running package scripts….....
installer: Running package scripts….....
installer: Running package scripts….....
installer: Validating packages….....

installer: The upgrade failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.)

Running Recon...
Retrieving inventory preferences from https://mycompany.jamfcloud.com/...
Locating package receipts...
Locating accounts...
Locating software updates...
Searching path: /Applications
Locating printers...
Locating hardware information (Mac OS X 10.14.4)...
Gathering application usage information...

Like
SOLVED Posted: by CorpIT_eB

@mack525 Any Ideas? I am stumped.

Like
SOLVED Posted: by mack525

hmmm... how are you deploying? Did you get/ add company Identifier to the script?

Like
SOLVED Posted: by CorpIT_eB

@mack525 I surly did I pulled it directly from Trend. As you can see it does not error out it completes but no Icons or Applications install on the machine it's self. It's as if all the JAMF configs are fine but the Installation itself is failing on the machine.

Like
SOLVED Posted: by CorpIT_eB

@mack525 It's definitely not executing the installation on the local machine I ran the .pkg manually from the tmp folder created and it installs without a problem.

So it has to do something with the execute command: installer -verbose -pkg /var/tmp/TrendMicro/WFBS-SVC_Agent_installer.pkg -target /

Like
SOLVED Posted: by mack525

hmm.. may need to tune that execute command.. odd that its giving you an error.

Like
SOLVED Posted: by CorpIT_eB

Ok @mack525 so now it's giving me this.

Executing Policy WFBS TrenMicro Installation
Downloading https://use1-jcds.services.jamfcloud.com//download/19727f945eb74fb797d9d257fa52498e/TrendMicro.dmg?token=downloadedtokengoeshere
Verifying DMG...
Verifying package integrity...
Installing TrendMicro.dmg...
Closing package...
Running script TrendMicro Installation...
Script exit code: 0
Script result: rm: /var/tmp/TrendMicro/Identifier.plist: No such file or directory
mkdir: /var/tmp/TrendMicro: File exists
Running command installer -pkg /var/tmp/TrendMicro/WFBS-SVC_Agent_installer.pkg -target /...
Result of command:
installer: Package name is Trend Micro Security Agent
installer: Upgrading at base path /
installer: The upgrade failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.)
Running Recon...
Retrieving inventory preferences from https://mycompany.jamfcloud.com/...
Locating package receipts...
Searching path: /Applications
Locating accounts...
Locating software updates...
Locating printers...
Locating hardware information (Mac OS X 10.14.4)...
Gathering application usage information...

Like
SOLVED Posted: by CorpIT_eB

@mack525 what ever is happening is happening during installation:

installer: Package name is Trend Micro Security Agent
installer: Upgrading at base path /
installer: The upgrade failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.)

Like
SOLVED Posted: by mack525

@CorpIT_eB hmmm.. let me search through some of our logs and match them up with yours..

Like
SOLVED Posted: by CorpIT_eB

@mack525 Any luck at all I have been unsuccessful at the installation at every test. I have opened up a ticket with trend as well to see if they might have any insight on this processes.

I feel like this may have something to do with the permissions the Agent is trying to run off, of even though I followed your instructions and set the user to root (0) & Group to Admin (80) Read and Write. I feel like it's trying to execute at the hidden private folder and throwing an Error I cant see first hand on the back end.

How do you have your permissions setup during creation at composer. Is it all root/admin from the top at the Private folder lvl or just at the Execution of the package?

Like
SOLVED Posted: by mack525

@CorpIT_eB Sorry man.. Lets get this thing figured out. Yes, permissions are all root/admin for mines. Give that a try.

Like
SOLVED Posted: by CorpIT_eB

@mack525 I got it to work, i revisited the script and was missing syntax, Once I fixed that it worked like a charm.

Thank You so much for all your help my friend truly a pleasure working with you and all the JAMF Nation on this.

Like
SOLVED Posted: by mack525

@CorpIT_eB What did you miss? Which script?

Like
SOLVED Posted: by CorpIT_eB

@mack525 I had forgot to re-activate the variable for the IDENTIFIER so essentially what was happening was that the installer would run try to find Trends ID and then error out. It was not evident to me till I relived the script and caught the syntax error.

Now on to the next adventure Parallels!! lol

Like
SOLVED Posted: by mack525

Glad it worked out! Nice catch! @CorpIT_eB

Like
SOLVED Posted: by achristoforatos

Where exactly was the syntax error. I think I am running into the same issue. The plist file comes down to the var_temp folder, then nothing happens.

Like
SOLVED Posted: by CorpIT_eB

@achristoforatos in my case it was at the string the variable was off. Went from

#!/bin/sh
<string>$youridentifierhere</string>

to the proper string and variable of:

#!/bin/sh
<string>$IDENTIFIER</string>

And I only caught it because, this was a piece of a much larger script.

Like
SOLVED Posted: by achristoforatos

So at the top of the script where IDENTIFIER="" I should place my identifier there then place $IDENTIFIER where you've placed it?

Like
SOLVED Posted: by CorpIT_eB

@achristoforatos That is correct. Essentially the ID comes from TrendMicro. you copy and paste that in between the "" so it will look something like:

#!/bin/sh
IDENTIFER="oiwdhcwjnbephrw12w34iodshfphpodhpdncpoe"

So when you call it in the string $IDENTIFER it just grabs the ID.

Like
SOLVED Posted: by achristoforatos

Do you have a correct copy of the script with placings for where the ID string should go?

Like
SOLVED Posted: by achristoforatos

Thanks for your help!

Like
SOLVED Posted: by CorpIT_eB
#!/bin/sh
IDENTIFIER="TrendMicroIDgoeshere"

rm /var/tmp/TrendMicro/Identifier.plist > /dev/null
mkdir /var/tmp/TrendMicro > /dev/null

cat > /var/tmp/TrendMicro/Identifier.plist << EOF
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
   <dict>
      <key>Identifier</key>
      <string>$IDENTIFIER</string>
   </dict>
</plist>
EOF
Like
SOLVED Posted: by achristoforatos

OH! I see what I'm doing wrong! Thanks so much for everyones help! And especially you helping me see what I was doing wrong.

Like
SOLVED Posted: by achristoforatos

@mack525 @CorpIT_eB Thank you for all the help!

Like
SOLVED Posted: by mack525

@CorpIT_eB @achristoforatos Unfortunately, None of these steps are documented by Trend. Could've saved all of us a lot of head pounding. Glad its working for you.. If you ever noticed that its not running.. you may need to update/repackage the installer agent thats dropped in the /var/tmp that may fix your issue.

Like
SOLVED Posted: by CorpIT_eB

@mack525 I hate to bring back an old post man but have you had any issues with your TrendMicro installation?

After having this install successfully on more than a dozen times with out issue, I am now getting errors at the package lvl. The only thing I have changed has been the categories in JAMF Pro in order to keep our instance clean. Categories should not have any influence on packages correct?

Executing Policy WFBS TrenMicro Installation Downloading https://server.services.jamfcloud.com//download/19727f945eb74fb797d9d257fa52498e/TrendMicro.dmg?token=mytokengoeshere Verifying DMG... Error: Could not verify the downloaded package. 1 Error: TrendMicro.dmg is corrupt. Running script TrendMicro Installation... Script exit code: 0 Script result: mkdir: /var/tmp/TrendMicro: File exists Running command installer -pkg /var/tmp/TrendMicro/WFBS-SVC_Agent_installer.pkg -target /... Result of command: installer: Error - the package path specified was invalid: '/var/tmp/TrendMicro/WFBS-SVC_Agent_installer.pkg'. Relaunching dock(s)... Running Recon... Retrieving inventory preferences from https://mycompanyname.jamfcloud.com/... Locating accounts... Locating package receipts... Searching path: /Applications Locating software updates... Locating printers... Locating hardware information (Mac OS X 10.14.5)... Gathering application usage information... Blessing i386 macOS System on /... Creating Reboot Script...

I have not changed or modified anything on the package since we compiled for creation.

Like
SOLVED Posted: by mack525

@CorpIT_eB Have you tried re-packaging the installer app?

Like
SOLVED Posted: by CorpIT_eB

@mack525 No, man I have not didn't want to mess with it since it was working so well. I will try and repackage it again next week and get back to you.

Just for self knowledge though Changing categories for policies and certain things in JAMF should not break any of your configurations correct?

Like
SOLVED Posted: by mack525

@CorpIT_eB Changing policy categories should have no effect to this issue.

Like
SOLVED Posted: by Adam.derrick

May want to check with the Vendor. I ran into a similar issue with Avast, reached out to them let them know I was looking to have Jamf push out the package and they made a special package.

Like
SOLVED Posted: by CorpIT_eB

@derrad Thanks it looks like it was just that sole machine that was added recently to the DEP as I created a new user today and it worked fine. But I have reached out to trend on multiple events for such an a reason, and was sent the link for mass deployment like x3 times.

They where not very helpful at all.

Like
SOLVED Posted: by Adam.derrick

Glad to hear you got it resolved. Sorry to hear they were not very helpful :(

Like