Deploying and managing Adobe apps using scripts

Take a look at Adobe RUM: https://helpx.adobe.com/enterprise/using/using-remote-update-manager.html

Adobe Caching server: https://helpx.adobe.com/enterprise/using/update-server-setup-tool.html

If you need to manage updates so users can't update the version, then I would deploy a "managed" Adobe Creative Cloud package.

Starting to look at options for deploying Adobe.  I'm going to test out using the Creative Cloud license and the apps from Jamf App Installers.  

I noticed that the packages created in the Adobe console expire after a time.  Does this expiration only effect when they can be downloaded.  Or would that effect the ability to deploy it from a Profile?

The gotcha I found with managing Adobe Apps with Jamf App Installers is that we let our users update their apps. If you use Jamf App Installers, it changes their privileges in Adobe Creative Cloud.

If you manage your Adobe Apps, Jamf App Installers is a nice way to go.

That expiration is only about the ability to download it from the Adobe Console. The pkgs will continue to work.

Expanding on obi-k's comment:
We do the same. Here's a high level view of our workflow:

1. Create and download packages on the Adobe Console. Be sure to enable RUM in these.
   We package each app individually rather than bundle multiples since the assets are so large. 
2. Open the Adobe provided packages, extract just the installers, zip each and upload it as a package to Jamf.
3. Add Jamf Software Patch Management Titles for each Adobe app - just to track the latest versions in Jamf.
4. Create policies in Jamf to install these. Include a script* in the policies to use RUM to update the app after the install. (This way you don't need to keep replacing these pkgs as Adobe releases updates)
5. Create policies that use RUM to update each app and make them available in Self Service.
6. Create Smart Groups that will scope the installers and updaters to Self Service based on whether the app is installed and or needs updates.

* I wrote a single script that takes attributes for the app, version and actions. I then reference it in the policies. Also I've added an Extension Attribute that checks the version of RUM so I can update that too if needed. 

Thanks for all the replies! It seems there isn't a quick-and-easy way to have as much control as we require, using just the clean Creative Cloud. Alas!

@mvu Thanks for the links! Guess I have to dig deeper into this. Not having admin-level control of our JAMF environment will be challenging! :)

@marksf Thank you for your suggestion. We won't be able to upload packages for the applications themselves, but it would be interesting to check out the basis of your script as an alternative, if that would be possible?

@mnordbye : Sure! This script will work if you've enabled Adobe Remote Update Manager in the admin console when you build the packages. 

The Script

adobeRumUniversal.sh

#!/bin/bash
#
# Runs Adobe RUM to manage Adobe Application updates
# Parameters available in Policies
# $4 = --action Options: list, download, install
# $5 = --productVersions see:
#      <https://helpx.adobe.com/enterprise/package/help/apps-deployed-without-their-base-versions.html>

if [[ -f /usr/local/bin/RemoteUpdateManager ]]; then
  echo "Starting Adobe RemoteUpdateManger..."
  /usr/local/bin/RemoteUpdateManager --action=$4 --productVersions=$5
else
  echo "Adobe RemoteUpdateManager not found."
fi

This script has two parameters:$4 = -action

Options: list, download, install

Specifies the action to be performed: list, download, or install.

• -action=list: Displays a list of applicable updates for the products installed on the machine.
• -action=download: Downloads the applicable updates.
• -action=install: Installs updates if they are downloaded already. If the updates are not already downloaded, this command first downloads the updates and then installs them.
• If --action is not specified, the command performs the default action and just downloads and installs the applicable updates.Note: The --action command line option currently does not support the download of updates for Acrobat and Reader.

$5 = -productVersions

SAP Codes

Adobe's full list of base versions and SAP codes.

#!/bin/bash
#
# Runs Adobe RUM to manage Adobe Application updates
# Parameters available in Policies
# $4 = --action Options: list, download, install
# $5 = --productVersions see:
#      <https://helpx.adobe.com/enterprise/package/help/apps-deployed-without-their-base-versions.html>

if [[ -f /usr/local/bin/RemoteUpdateManager ]]; then
  echo "Starting Adobe RemoteUpdateManger..."
  /usr/local/bin/RemoteUpdateManager --action=$4 --productVersions=$5
else
  echo "Adobe RemoteUpdateManager not found."
fi

I should note that this script is specifically for use with Jamf policies. 
We can use this one script to install and / or update the base version of most Adobe apps. 

Options

• Packages: Installs Adobe Photoshop base version of 22.0 (or later)
• Scripts: adobeRumUniversal.sh
  • Parameter --action = install (checks for, downloads & installs available updates)
  • Parameter --productVersions = PSHP#22.0 (limits “action” to base version 22.0, i.e. CC 2021)
• Maintenance: Update Inventory (when done)

Scope

• Targets (Smart Groups)
  • Create a group with criteria - App title = Adobe Photoshop 2021
• Exclusions (Smart Groups)
  • Apps - Adobe Photoshop 2021 - Latest (If the app is up-to-date, don’t display in Self Service)

This seems like a very clean way to deal with Adobe in JAMF @marksf . Thanks for sharing!

To understand you correctly, you still need a base package WITH Photoshop included for this to work, right? Not just a Managed package with RUM?

Thanks for all the great help so far, this forum is a lifesaver!

Just read on the link you provided that you DON'T have to have the base version installed. Great news.

I'll try to do some tests with your suggestion. Thanks so far!

So far, RUM is the best option. To deploy updates, you'd need to build a managed package through the Adobe console and trigger RUM with a script. However, this only works for minor releases and won't upgrade Adobe from version 22 to version 23.

this is the script I use to trigger RUM 

#!/bin/bash

#kills all adobe processes

pkill -f Adobe

pkill -f adobe

# Run the RemoteUpdateManager command with the install action

/usr/local/bin/RemoteUpdateManager --action=install

Posted this on another thread but perhaps this is a better place for this question.  If I deploy Acrobat with Jamf Apps and it also installs the CC app, do I still need to deploy via a Profile the "blank" CC only pkg downloaded from Adobe? Is that just to manage some of the settings?