The McAfee ePO repository infrastructure allows you to deploy the EEMac product to your managed systems from a central location. Once you have checked in the software package, use this Product Deployment client task to install the product on managed systems.
Before you begin
You must have appropriate permissions to perform this task.
For more details and procedures on how to perform this task, see the product documentation for your version of McAfee ePO.
Task
1 Click Menu | Policy | Client Task Catalog, select McAfee Agent | Product Deployment as Client Task Types, then click Actions | New Task. The New Task dialog box appears.
2 Ensure that Product Deployment is selected, then click OK.
3 Type a name for the task you are creating and add any notes. 4 Next to Target platforms, select Mac to use the deployment. 5 Next to Products and components set the following:
a Select Endpoint Encryption Agent for Mac OS X 7.0.0.x to specify the version of the EEAgent to be deployed.
b Click + and select Endpoint Encryption for Mac OS X 7.0.0.x to specify the version of the EEMac package to be deployed.
c Set the Action to Install, then select the Language of the package, and the Branch.
6 Click Menu | Systems | System Tree | Systems, then select the system on which you want to deploy product and click Actions | Agent | Modify Tasks on a single system.
7 Click Actions | New Client Task Assignment. The Client Task Assignment Builder wizard appears.
8 On the Select Task page, select Product as McAfee Agent and Task Type as Product Deployment, then select the task you created for deploying product.
9 Next to Tags, select the desired platforms to which you are deploying the packages, then click Next: • Send this task to all computers
• Send this task to only computers that have the following criteria — Use one of the edit links to configure the criteria.
10 On the Schedule page, select whether the schedule is enabled, and specify the schedule details, then click Next.
11 Review the summary, then click Save.
4
Installing EEMacSend an agent wake-up call
The client computer gets the policy update whenever it connects to the McAfee ePO server (during the next ASCI). The policy update can be scheduled or forced. The agent wake‑up call option forces the policy update to the client system. For information on adding a new system, see the product documentation for your version of McAfee ePO.
Before you begin
You must have appropriate permissions to perform this task. Task
1 Log on to the ePolicy Orchestrator server as an administrator.
2 Click Menu | Systems | System Tree, then select a system or group of system(s) from the left pane. 3 Select the System Name(s) of that group.
4 Click Actions | Agents | Wake Up Agents from the drop‑down menu.
5 Select a Wake‑up call type and a Randomization period (0‑60 minutes) by which the system(s) respond to the wake‑up call sent by ePolicy Orchestrator.
6 Select Get full product properties for the agent(s) to send complete properties instead of sending only the properties that have changed since the last agent‑to‑server communication.
7 Select Force complete policy and task update for the agent to send the complete policy and task update. 8 Click OK.
To view the status of the agent wake‑up call, navigate to Menu | Automation | Server Task Log.
Add users to a system
Use ePolicy Orchestrator to add the EEMac users to the client system. The EEMac software can be activated on a client system only after you add a user and enforce the required encryption policies correctly.
Before you begin
You must have appropriate permissions to perform this task. Task
1 Click Menu | Data Protection | Encryption Users to open the My Organization page. 2 Select a group or system(s) from the System Tree pane on the left.
To add users to a particular system, select the required system from the System tab under the My Organization pane on the right.
3 Click Actions | Endpoint Encryption | Add Users to open the Add Endpoint Encryption Users page. 4 Add users: Click + in the Users field, browse to the users list, select the Users, then click OK. 5 Add groups: Click + in the From the groups field, browse to the users groups list, select the groups,
then click OK.
Installing EEMac
6 Add an organizational unit: Click + in the From the organizational units field, browse to the organizational unit list, select the unit, then click OK.
7 In the Add Endpoint Encryption Users page, click OK.
Assign a policy to a system
You can assign the required policy in the Policy Catalog to any system or system group. Assignment allows you to define policy settings once for a specific need, then apply the policy to multiple locations.
Before you begin
You must have appropriate permissions to perform this task.
When you assign a new policy to a particular group, all child groups and systems that are set to inherit the policy from this assignment point, get the set policies.
Task
1 Click Menu | Systems | System Tree, then on the Systems tab under System Tree, select a group. All the systems within this group (but not its subgroups) appear in the details pane.
2 Select a system, then click Actions | Agent | Modify Policies on a Single System. The Policy Assignment page for that system appears.
3 From the Product drop‑down list, select Endpoint Encryption 7.0.x. The policy Categories under Endpoint Encryption appears with the system's assigned policy.
4 Select the Product Setting policy category, then click Edit Assignments.
5 If the policy is inherited, select Break inheritance and assign the policy and settings below next to Inherit from. 6 From the Assigned policy drop‑down list, select the Product Setting policy.
From this location, you can edit the selected policy, or create a new policy.
7 Select whether to lock policy inheritance so that any systems that inherit this policy can't have another one assigned in its place.
8 When modifying the default policy or creating the new policy, select any one of the disk encryption options other than None, by navigating to Encryption (tab) | Encrypt. The default option None does not initiate the encryption.
Make sure that you select the correct encryption provider and set the priority, as appropriate. 9 Click Save.