SMP Agent for Mac 7.5 SP1 Cannot Be Installed Due to Expired Certificate

When installing the SMP agent for Mac, the installation fails or displays an expired certificate message. This affects only the SMP Agent for Mac 7.5 SP1+. It does not affect any 7.6 versions.

When running the agent install from a command line, the following error appears in the console:

installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override.

When using the GUI, an error similar to the following will appear. If using a command line, the process may fail.

This occurs because the certificate used in these pkg files has expired. Newer versions of these SMP Agent pkg files are not affected since they were signed with a newer certificate.

Symantec has provided two versions of updated pkg files. These are for:

• 7.5 SP1GA (original release with no hotfixes)
• 7.5 SP1 HF4 and above

NOTE: See the following Symantec Knowledgebase article to download the pointfix attachments: http://www.symantec.com/docs/TECH232094. One of the files is slightly too large for this system.

For the 7.5 SP1 GA point fix

To install the point fix on the Notification Server:

1. On the NS, Download the attached file named, '75_SP1_GA_PF3827106_mac_agent_certificate_fix.zip', preferably into a new directory.
2. Unzip the file.
3. Change to the new point fix directory.
4. As administrator, run PfInstaller2.exe. This will install the agent files from the pointfix to the NSCap directory for each OS platform, add/update version registry keys, etc.
5. The new version will be 7.5.3310.
6. Previous versions of the agent binaries will be backed up to the "<current directory>\ULMBackup" directory.
7. At this point, all new installations of the agent will use the pkg files that contain the new certificate. Existing agent installations are not affected.

For the 7.5 SP1 HF4+ point fix

1. Download the attached file, named "75_SP1_HF4_PF3827106_mac_agent_certificate_fix.zip", to the Notification Server,
2. Unzip the file
3. Copy the included pkg and manifest files to the correct destination directory on the NS.
4. Rename or move the existing files, if desired, but they are really of no use.

The correct destination path on the Notification Server is: \Program Files\Altiris\Notification Server\NSCap\bin\UNIX\Agent\Mac\x86

NOTE: Do not move or rename any files in this directory other than those in the attached zip file. They are all needed for a correct agent installation.

NOTE: The affected pkg files (plus their corresponding .manifest files) are:

• AltirisBaseTaskHandlers.pkg
• AltirisClientTaskAgent.pkg
• AltirisSoftwareManagementFramework.pkg