Hello,
I have seen that the FortiClient is causing difficulties for some users. However, I have just been able to create a relatively simple solution with which the config files can also be made to work by default.
My requirements:
macOS 11.2.3 (intel) / Jamf Pro / DEPNotify 1.1.6
- complete installation on one system
- upload the install.mpkg to Jamf Admin
- start Jamf Composer and create a pkg with the following path incl. all subfolders (all custom settings are saved here): /Library/Application Support/Fortinet
- new policy: select both pkg-files, I first selected the config-pkg and then the Install.mpkg.
That´s all. I had success with this. FortiClient is running perfect with custom settings. No restart needed.
This is what I created, however doesn't want to install.
Create a new directory wherever you want it to reside using composer. Take the .dmg installer and convert it into a source and rebuild it as a package.
In mickl089's example, 'private/var/tmp/FortiClient' and dump the contents of the .dmg in that directory.
Have your post-install script invoke the install. Just make sure you have it in the same directory.
installer -allowUntrusted -pkg /private/var/tmp/FortiClient/Install.mpkg -target /Applications/
For users that aren't admins, some are seeing this is in our test deployment. Is anyone familiar with this, and any way to configure it to not prompt users?
Just a quick update and info share for our free implementation of FortiClient 7.0.3. Thanks to Mickl for providing the bulk of this process!
- Deploy FortiClient 7.0.3.mpkg (pulled from DMG) via Composer pkg to custom folder on endpoint
- Deploy custom vpn.plist via composer to /Library/Application Support/Fortinet/FortiClient/conf/ to endpoint
- If upgrade, run a site acceptable variation of the following script
#!/bin/bash
#Stops all running FortiClient processes
killall FortiClientAgent
killall FortiClient
#Initiates silent uninstall of current Forticlient
/Applications/FortiClientUninstaller.app/Contents/Library/LaunchServices/com.fortinet.forticlient.uninstall_helper
#Run FortiClient 7.0.3 Installer
installer -verboseR -pkg "/private/tmp/FortiClient_7.0.3_Source_Files/FortiClient 7.0.3.mpkg" -target /
#Copy vpn.plist from tmp to FortiClient config folder
cp /private/tmp/FortiClient_7.0.3_Source_Files/vpn.plist "/Library/Application Support/Fortinet/FortiClient/conf/"
- If fresh install, create another policy to push FortiClient 7.0.3.mpkg to endpoint, then install vpn.plist, and add a maintenance item to update inventory
- Create a smart group "FortiClient Installed" with criteria "Application Title Is FortiClient.App"
- To hide client-side pop-ups (FortiTray popup untested at this time) create a configuration profile with both PPPCs and System Extensions as below, and scope it to "FortiClient Installed":
