ESET Endpoint Antivirus – Privacy Preferences Policy Control

A quick one – if you’re deploying ESET Endpoint Antivirus or Security to Macs running macOS 10.14.x Mojave, you (or your users!) will have encountered this dialog:

To compound the problem, if you follow the instructions in that dialog and you’re not logged in as a local administrator, you’ll soon hit a roadblock.

This is all part of Apple’s new Privacy Preferences Policy Control (PPPC), or Transparency Consent Control (TCC), depending on what you want to call it. If you’d like to know more about that, check out Carl’s blog post and join the #tcc channel on the MacAdmins Slack.

But what can we do about ESET?

The answer is pretty simple, yet not:

  1. Create a Configuration Profile that allows ESET Endpoint Antivirus full disk access.
  2. Deploy it with your MDM service to clients that are either User Approved or enrolled via Apple School or Business Manager (you can’t install this profile any other way!).

I used Jamf’s marvellous PPPC Utility to make a quick profile and upload it to my Jamf Pro Server. Just drag the ESET Endpoint Antivirus or Security app into it and select Allow for the All Files permission. Then save your profile and deploy with your MDM of choice, or if you have Jamf, upload it directly to your Jamf Pro Server (that feature is particularly nice!). Here’s what PPPC Utility should look like if you’ve set things up properly:

Click here for an example Configuration Profile for ESET Endpoint Antivirus that you can use with your MDM, if you like.

Be aware that I haven’t done any testing with ESET Endpoint Security as we don’t use it in our environment – the bundle ID is different as well, so my above profile won’t work. If you do use Endpoint Security and know of other permissions it needs, give me a shout!

One thought on “ESET Endpoint Antivirus – Privacy Preferences Policy Control”

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s