Create Deployment Package for Sophos Safeguard Data Encyrption

[KyleEricson]

I need help with importing a certificate in system keychain and then installing a package and then dragging a .zip file into system preferences to the Sophos safeguard settings panel. I have tried snapshots but that only seem to kindof work for the current user. How can I make a .pkg with composer for any user on a machine. Any help would be great.

[wmateo]

You can do this a few ways.

1. You can package the cert into a folder, and the run a command to import it into the keychain. You can do this via policy. Command would look something like this: sudo security add-trusted-cert -d -r trustRoot -k "/Library/Keychains/System.keychain"
   "/private/tmp/certs/certname.cer"

2. You can use configuration profiles to upload your Root CA certificate and machine will get it as soon as it gets the MDM profile.

3. You can bake Root CA right into your image.

as far as the ZIP file dragging, look into the Activate Sophos script on this site.