Prerequisites for the wrapper package

Before you build the wrapper package, ensure that the following prerequisites are met.

  • A macOS endpoint (physical or virtual machine) to use as a build and test machine, with Terminal access and administrator rights.
  • The agent installer files: the .pkg installer package and its companion .json configuration file.
  • An active Apple Developer Program membership (organizational or individual). This is required to obtain a Developer ID Installer certificate for signing, and an Apple ID for notarization.
    Note: Organization enrollment requires a D-U-N-S number and legal-entity verification, which can take 24 to 48 hours. Start this before the other prerequisites.
  • Xcode Command Line Tools, which provide the productsign, notarytool, and stapler commands used when the package is signed and notarized. Install them with xcode-select --install.
  • A Developer ID Installer certificate installed in the Keychain of the build macOS endpoint.
    Note: A Developer ID Application certificate is not required for this wrapper. That certificate signs executable payload content, and this wrapper's payload contains only the Forcepoint-signed WebsenseEndpoint.pkg, its manifest.json, and a postinstall script. The outer package is signed with the Developer ID Installer certificate.
  • An app-specific password or API key configured for Apple's notarization service (notarytool). Generating an app-specific password requires an Apple ID with two-factor authentication enabled.
  • Network access from the build macOS endpoint to Apple's developer and notarization services.
  • A Microsoft Intune admin center account with permissions to add and assign macOS apps.
  • Test macOS devices already enrolled in Intune, for validating the deployment before wider rollout.