Natively, Mac MDM only supports installing signed. You can use Microsoft Endpoint Manager to deploy the most common app types supported by macOS such as. You might need to provide your Keychain password with the productsign command.This post has been republished via RSS it originally appeared at: Intune Customer Success articles.īy: Arnab Biswas Program Manager - Microsoft Endpoint Manager - Intune

Output-folder is the location where the signed PKG gets stored with the command.

Folder refers to the current location of the unsigned package on your Mac.

Developer ID Installer: Your Apple Account Name (serial number) is the name of the certificate you earlier created and installed in Keychain Access on your MacOS.

Productsign ‐‐sign “Developer ID Installer: Your Apple Account Name (serial number)” ~/folder/unsignedpackage.pkg ~/output-folder/signedpackage.pkg Open the Terminal and use the next command to sign the package: When you have the certificate you can sign the macOS PKG. cer file and double-click it to install in the Keychain Access on your macOS.

Upload the certificate signing request (.csr) you created earlier and continue.

Then navigate to Certificates, Identifiers & Profiles and click the + symbol to create a new certificate.

Please note that creating a Developer ID installer certificate requires Account Owner/ Holder permission.

Go to the Apple Developer portal > Account and sign in.

csr (certificate signing request) on your computer.

User Email Address: your email address used with the Apple Developer account.

From there, open the Certificate Assistant and the option Request a Certificate From a Certificate Authority.

Go to Keychain Access on your mac ( /Applications/Utilities).

If you don't have the certificate yet, follow the next steps: You can sign packages for macOS with the same certificate until it expires. To sign a PKG, you need an appropriate certificate obtained from an Apple Developer account.

The PKG must be signed with a Developer ID certificate to verify that it is from a trusted source.

The package must be built as a product archive (built with the command productbuild).

PKG must meet two requirements to deploy them on managed macOS devices with Miradore: Sudo productbuild ‐‐component /Applications/Skype.app ~/Desktop/Skype.pkg Signing macOS PKGs for deployment The next command converts Skype.app in Applications folder to Desktop as Skype.pkg:

Sudo productbuild ‐‐component /path_to_app/App_name.app /output_folder/Converted.pkg Open the Terminal on the computer ( Applications > Utilities) and execute the command:

Convert app to dmg mac