Introduction

In this guide will cover the installation and maintenance of the Naverisk Mac agent, and the installation and configuration of the Splashtop Streamer application to allow remote control of the Mac. If you encounter any difficulty with the agent or Splashtop installation, please contact support@naverisk.com for assistance.

1.0 Installing the Mac Agent

First, download the agent from your Naverisk console. The agent is in a Zip archive, open the .zip file to extract the agent PKG file. Once extracted, the agent may be installed interactively from the Finder, or using the Terminal or SSH.

1.1 Installing using the Finder

Installing locally is simple and uses the standard Mac installer, so is familiar to most Mac users. This allows a "DIY" approach where the agent can be distributed to users to install themselves.

Open a Finder window and locate the NASInstall.pkg file extracted above. Double click on the file to open the installer.

Follow the prompts to install the agent.

 During the installation process, you will be asked to enter your password or scan your fingerprint (if applicable to your Mac).

You may also be asked to allow Installer to access some folders. You must grant access or the installer may fail.

Once the installer has completed, the agent will automatically start, and the Mac will appear in Naverisk.

1.2 Installing from Terminal (command shell)

The agent can also be installed locally from the command shell using Terminal.

Open Terminal, and change to the directory where you extracted the NASInstall.pkg file. Install using the command:

sudo installer -pkg NASInstall.pkg -target /Applications

You will need to provide your password for the install to begin. Once completed, the agent will automatically start.

1.3 Installing remotely using SSH

Remote installs of the agent can be achieved by connecting to the Mac using SSH. Note that SSH must be enabled on the target Mac. You must be on the same network, or you can SSH from a device with the Naverisk agent already installed.

Establish an SSH connection to the Mac from your computer. This can be from a Mac, Linux or Windows PC with a suitable SSH client installed.

Copy/download the NASInstall.pkg file to the Mac using one of the following methods:

  • Use mount to connect to a local file share.
  • Download from a web server using curl.
  • Transfer from your computer using scp.

CD to the the directory where you copied the NASInstall.pkg file. Install using the command:

sudo installer -pkg NASInstall.pkg -target /Applications

You will need to provide your password for the install to begin. Once completed, the agent will automatically start.

1.4 Agent behaviour

The agent runs completely in the background and automatically starts when the Mac is started up. It does not show an icon on the menu bar. To verify the agent is running, either look for the process NAS using the Activity Monitor, or from Terminal use the command ps -ef | grep NAS .

Please refer to section 6 for details on starting and stopping the agent.

2.0 Installing Remote Control

Naverisk uses the Splashtop Streamer application to enable remote control to Mac devices. Splashtop Streamer is not automatically installed, and must be installed separately on each Mac device to enable Naverisk RC to that device. This installation may either be done using a Script Pack from Naverisk, or manually on the individual Mac.

2.1 Install using Script Pack.

If not already available in your Naverisk console, go to the Routine Store and download the Mac Streamer Deployment script pack, and import it into Naverisk.

In Naverisk, under Devices select the desired Mac devices, and from the Task List select Run Script Packs. Choose Mac Streamer Deployment and click Run. The script pack will require a few minute to download to the target device and complete the installation.

Following completion of the install, if you are running MacOS 10.14 (Mojave) or 10.15 (Catalina) please follow the steps in section 2.3 to grant Splashtop other permissions required for it to run.

2.2 Installing using the Finder

Download Splashtop Streamer (under Splashtop Personal) for MacOS from https://www.splashtop.com/downloads.

Double click the installer and follow the prompts to install the application. 

You will need to enter your password for the installer to run, and approve any access requests made eg to specific folders.

When the installation is completed, the Splashtop Streamer window will open. Please note that this window will open each time a user logs into the Mac. 

Following completion of the install, if you are running MacOS 10.14 (Mojave) or 10.15 (Catalina) please follow the steps in section 2.3 to grant Splashtop other permissions required for it to run

2.3 Splashtop application permissions - MacOS 10.14 Mojave and 10.15 Catalina

Apple released macOS 10.15 Catalina on October 7, 2019.  This new release has stricter security requirements that require explicit permission to allow applications to have control.

Four options under System Preferences / Security & Privacy / Privacy need to be checked for a remote session to work normally. Note that these security settings cannot be configured remotely - you must change these settings locally before being able to establish a remote session.

Also, please note that if these are already checked, please uncheck and recheck them. This action prompts the permissions to reset if they weren't working before.

Note that these settings may easily be accomplished by the user, and Splashtop includes a helper to guide the user through the required settings. This helper appears when the user opens Splashtop from the menu bar. If required, the user can be guided to complete these settings via a phone call before an initial remote control session is made. Once configured, the settings do not need to be repeated.

1 . Accessibility (affects control) – The option is available on macOS 10.14 Mojave and needs to be checked to enable remote control. This is the same with 10.15.

2. Full Disk Access (affects file transfer) – The option is available on macOS 10.14 Mojave but does not need to be checked. It must be checked to use File Transfer on 10.15. If not checked, files/folders of the remote Mac will not be shown in the file transfer window.

3. Screen Recording (affects remote connection) – The option is not available on macOS 10.14 Mojave. It must to be checked to establish a remote session on 10.15. If not, you will not be able to establish a remote session and there will be a popup on the streamer computer (you cannot configure this remotely): 

4. Microphone (affects sound stream) – The option is available on macOS 10.14 Mojave and needs to be checked to stream sound over remote connection. This is the same on 10.15.

For further information regarding these accessibility requirements, please refer to the Splashtop Knowledge base article.

3.0 Remote Control and Management

Several methods are available to remotely control and manage Mac devices. All of these are done from the Naverisk console, are audited, and do not require a VPN to be established to the local network

3.1 Naverisk Remote Control

Naverisk Remote Control uses Splashtop to provide full remote access to the Mac desktop environment. You can also copy files to and from the Mac and your computer.

To establish a remote connection, open the device in the Naverisk console, and select Naverisk RC. Click on the Remote Control icon to the left of the selector to launch the session. 

Depending on your web browser, you may be asked if you wish to open Splashtop for RMM. 

3.2 Remote SSH

You can launch an SSH connection to the Mac from Naverisk. This will require a local SSH client (puTTY) to be installed on your PC, and SSH will need to be enabled on the Mac. This is done from System Preferences, under Sharing

To start the SSH session, in Naverisk select SSH and optionally select the port (default is 22), then click the Remote Control Icon. 

You may be asked to open NaveriskRCStarter.

3.3 Script Packs

Frequently used tasks including remote deployment of software, can be carried out remotely using script packs. Full details on creating and using script packs are available in Applying Scripts


4.0 Removing Mac Agents

Remove Mac agents by running the following commands in sequence:

4.1 Mac El Capitan and above:

Locate the Naverisk Application using ‘Finder’ and move this to the trash. 

sudo launchctl unload /Library/LaunchDaemons/com.naverisk.agent.plist

sudo rm -rf /Library/Naverisk

sudo rm -rf /usr/share/Naverisk

sudo rm -rf /var/root/Library/Logs/Naverisk

sudo rm /Library/LaunchDaemons/com.naverisk.agent.plist

4.2 Mac Agents (older versions):

sudo launchctl unload /System/Library/LaunchDaemons/com.naverisk.agent.plist

sudo rm -rf /Library/Naverisk

sudo rm -rf /usr/share/Naverisk

sudo rm -rf /var/root/Library/Logs/Naverisk

sudo rm /System/Library/LaunchDaemons/com.naverisk.agent.plist

 

5.0 File Locations

5.1 Mac El Capitan & Above:

Log files - /Applications/Naverisk.app/Contents/macOS/Naverisk

Config files - /Applications/Naverisk.app/Contents/MacOS/Naverisk/Agent/

Executable - /Applications/ Naverisk.app/Contents/MacOS

Packages - /Applications/Naverisk.app/Contents/MacOS/Packages/RemoteConsolePackage/ScriptPacks

Service defn - /Library/LaunchDaemons/

5.2 Mac (older versions):

Log files - /var/root/Library/Logs/Naverisk/

Config files - /Library/Naverisk/

Executable - /usr/share/Naverisk/

Packages = /usr/share/Naverisk/Packages/

Service defn - /System/Library/LaunchDaemons/


6.0 Agent Control

sudo launchctl start com.naverisk.agent

sudo launchctl stop com.naverisk.agent (The agent will auto restart following this command)

sudo launchctl unload /Library/LaunchDaemons/com.naverisk.agent.plist (Prevents agent being run)

sudo launchctl load /Library/LaunchDaemons/com.naverisk.agent.plist (Recreate agent service)

Did this answer your question?