Deploy bitdefender to MacOS

Create a folder that is going to be used for future operations.

For this example C:\test is going to be used.

Create an installation package in GravityZone.

Download the BEST installer and save it in the previously created folder.

Download the official Microsoft Win32 Content Prep Tool.

Open Command Prompt.

Navigate to the folder where the Microsoft Win32 Content Prep Tool installer was downloaded.

Launch the Microsoft Win32 Content Prep Tool and follow the displayed instructions.

Open the Microsoft Intune Admin Center.

Go to Apps > Windows.

Select Add.

In the Select app type window, select Windows app (Win32).

Click Select.

In the App information tab, click Select app package file.

In the App package file menu, select the .intunewin file that was previously created.

Click Ok.

The App Information window must be filled in with the following mandatory information about the uploaded package:

After the information is added, click Next.

The Program window contains some mandatory fields that must be filled in:

Delete all entries under the Return code section that can indicate the post-installation behavior. This ensures that you can properly control the post-installation status during next steps.

Click Next.

In the Requirements window, the following fields are mandatory:

Click Next.

In the Detection rules window, go to Use a custom script > Select File and upload the following script as a .ps1 file:

if ((Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Endpoint Security" -Name "InstallLocation")`
-and ((Get-Service EPIntegrationService).status -like "Running")`
-and (Get-Service EPSecurityService).status -like "Running" )

{
    Write-Output "Bitdefender Endpoint Security Tools was succesfully installed"
    exit 0
} else {
    Write-Output "Bitdefender Endpoint Security Tools was not installed"
    exit 1
}

It is strongly recommended to code sign the detection script and set the Enforce script signature check and run script silently option to Yes. This assure that the script comes from a trusted source and was not tampered with after it was signed. This option allows the script to run without any additional confirmations or prompts.

If you choose not to code sign the detection script, the Enforce script signature check and run script silently option can be set to No. While this is not recommended, if the PowerShell execution policy on the target endpoint is set to restricted, you are going to be prompted with a confirmation for the script to run.

This script checks if BEST was installed, by verifying the HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Endpoint Security registry key. In addition, it ensures that the EPSecurityService and EPIntegrationService services are running.

The Dependencies and Supersedence windows can be left with default values.

In the Assignments window you can set up what users or user groups can use the installer.

In the Review + create window, select Create.

In GravityZone Control Center, go to the Network page.

In the Network inventory, select the Windows or Linux machine on which you want to install the Relay role.

Click the Tasks button in the action toolbar and select Reconfigure agent.

Alternately, right-click on the machine name and select Tasks > Reconfigure agent.

Run the Reconfigure agent task to add the Relay role to the target machine.

For details on how you use the Reconfigure agent task, refer to Reconfigure agent.

In GravityZone Control Center, go to the Network page.

In the Network inventory, select the Windows or Linux machine on which you want to install the Relay role.

Click the Tasks button in the action toolbar and select Run network discovery.

Alternately, right-click on the machine name and select Tasks > Run network discovery.

Press the Windows + R keys to open the Run application.

Type in the IP address of the macOS machine.

When prompted, enter the macOS credentials.

Keep in mind that you also must enter these credentials in Credentials manager in GravityZone Control Center. If you want to deploy BEST on multiple macOS machines, you must enter the user account credentials for all of them.