Posted on 06-26-2018 08:04 AM
computers running 10.13.5 are now getting the following policy failure when installing Sharp printer driver. Anybody have an idea on how to use this -allowUntrusted
I found this installer line for iLife
sudo installer -dumplog -verbose -allowUntrusted -pkg "path/to/iLife.pkg" -target /
this is a self service printer install policy.
the driver policy is a custom event that gets called, it's always worked so i know it's not a policy issue, it's a high sierra issue with this new Certificate trust
* Installation failed. The installer reported: installer: Package name is MX-PBX1<br/>installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override.
Solved! Go to Solution.
Posted on 06-27-2018 11:05 AM
I figured something out that got the certificate trusted.
i cached the print driver installer
used execute command with installer -allowUntrusted -pkg ppppppppp -target /
and it installed the driver
Posted on 06-26-2018 11:15 AM
Suspicious Package and Pacifist can show you what certificate was used to sign the installer, so maybe take a look at the .pkg with one of those tools.
Posted on 06-27-2018 09:59 AM
@chris.hansen what can i do once i find the certificate information? I installed the driver on a test laptop and the initial screen shows an untrusted certifacate message, i click allow, and then the rest of the driver install proceeds. Afterwards i look in keychain access and see the certificate
Posted on 06-27-2018 11:05 AM
I figured something out that got the certificate trusted.
i cached the print driver installer
used execute command with installer -allowUntrusted -pkg ppppppppp -target /
and it installed the driver
Posted on 06-28-2018 01:03 AM
You can also remove the Certificate entirely as described here. https://managingosx.wordpress.com/2012/03/24/fixing-packages-with-expired-signatures/
Posted on 07-03-2018 10:25 AM
Ask the vendor to update the installer with a valid cert?