This guide covers the installation and maintenance of the Naverisk Mac agent, and the installation and configuration of the Splashtop Streamer application to allow remote control of the Mac. If you encounter any difficulty with the agent or Splashtop installation, please contact support@naverisk.com for assistance.

Please note:- Our current MAC agent is supported on the M Series chips and all current MAC OS versions.

First, download the agent from your Naverisk console. The agent is in a Zip archive, open the .zip file to extract the agent PKG file. Once extracted, the agent may be installed interactively from the Finder, or using the Terminal or SSH.

Installing locally is simple and uses the standard Mac installer, so is familiar to most Mac users. This allows a "DIY" approach where the agent can be distributed to users to install themselves.
​
Open a Finder window and locate the NASInstall.pkg file extracted above. Double click on the file to open the installer.

Follow the prompts to install the agent.

 During the installation process, you will be asked to enter your password or scan your fingerprint (if applicable to your Mac).

You may also be asked to allow Installer to access some folders. You must grant access or the installer may fail.

Once the installer has completed, the agent will automatically start, and the Mac will appear in Naverisk.

The agent can also be installed locally from the command shell using Terminal.

Open Terminal, and change to the directory where you extracted the NASInstall.pkg file. Install using the command:

sudo installer -pkg NASInstall.pkg -target /Applications

You will need to provide your password for the install to begin. Once completed, the agent will automatically start.

Remote installs of the agent can be achieved by connecting to the Mac using SSH. Note that SSH must be enabled on the target Mac. You must be on the same network, or you can SSH from a device with the Naverisk agent already installed.

Establish an SSH connection to the Mac from your computer. This can be from a Mac, Linux or Windows PC with a suitable SSH client installed.

Copy/download the NASInstall.pkg file to the Mac using one of the following methods:

CD to the the directory where you copied the NASInstall.pkg file. Install using the command:

sudo installer -pkg NASInstall.pkg -target /Applications

You will need to provide your password for the install to begin. Once completed, the agent will automatically start.

The agent runs completely in the background and automatically starts when the Mac is started up. It does not show an icon on the menu bar. To verify the agent is running, either look for the process NAS using the Activity Monitor, or from Terminal use the command ps -ef | grep NAS .

Please refer to section 6 for details on starting and stopping the agent.

Naverisk uses the Splashtop Streamer application to enable remote control to Mac devices. Splashtop Streamer is not automatically installed, and must be installed separately on each Mac device to enable Naverisk RC to that device. This installation may either be done using a Script Pack from Naverisk, or manually on the individual Mac.

If not already available in your Naverisk console, go to the Routine Store and download the Mac Streamer Deployment script pack, and import it into Naverisk.
​
In Naverisk, under Devices select the desired Mac devices, and from the Task List select Run Script Packs. Choose Mac Streamer Deployment and click Run. The script pack will require a few minutes to download to the target device and complete the installation.

Following completion of the install, if you are running MacOS 10.14 (Mojave) or 10.15 (Catalina) please follow the steps in section 2.3 to grant Splashtop other permissions required for it to run.

Download Splashtop Streamer (under Splashtop Personal) for MacOS from http://my.splashtop.com/csrs/mac

Double click the installer and follow the prompts to install the application. 

You will need to enter your password for the installer to run, and approve any access requests made eg to specific folders.

When the installation is completed, the Splashtop Streamer window will open. Please note that this window will open each time a user logs into the Mac. 

Following completion of the install, if you are running MacOS 10.14 (Mojave) or 10.15 (Catalina) please follow the steps in section 2.3 to grant Splashtop other permissions required for it to run

Apple released macOS 10.15 Catalina on October 7, 2019.  This new release has stricter security requirements that require explicit permission to allow applications to have control.

Four options under System Preferences / Security & Privacy / Privacy need to be checked for a remote session to work normally. Note that these security settings cannot be configured remotely - you must change these settings locally before being able to establish a remote session.

Also, please note that if these are already checked, please uncheck and recheck them. This action prompts the permissions to reset if they weren't working before.

Note that these settings may easily be accomplished by the user, and Splashtop includes a helper to guide the user through the required settings. This helper appears when the user opens Splashtop from the menu bar. If required, the user can be guided to complete these settings via a phone call before an initial remote control session is made. Once configured, the settings do not need to be repeated.

1 . Accessibility (affects control) – The option is available on macOS 10.14 Mojave and needs to be checked to enable remote control. This is the same with 10.15.

2. Full Disk Access (affects file transfer) – The option is available on macOS 10.14 Mojave but does not need to be checked. It must be checked to use File Transfer on 10.15. If not checked, files/folders of the remote Mac will not be shown in the file transfer window.

3. Screen Recording (affects remote connection) – The option is not available on macOS 10.14 Mojave. It must to be checked to establish a remote session on 10.15. If not, you will not be able to establish a remote session and there will be a popup on the streamer computer (you cannot configure this remotely): 

4. Microphone (affects sound stream) – The option is available on macOS 10.14 Mojave and needs to be checked to stream sound over remote connection. This is the same on 10.15.

For further information regarding these accessibility requirements, please refer to the Splashtop Knowledge base article.

Several methods are available to remotely control and manage Mac devices. All of these are done from the Naverisk console, are audited, and do not require a VPN to be established to the local network
​

Naverisk Remote Control uses Splashtop to provide full remote access to the Mac desktop environment. You can also copy files to and from the Mac and your computer.

To establish a remote connection, open the device in the Naverisk console, and select Naverisk RC. Click on the Remote Control icon to the left of the selector to launch the session. 

Depending on your web browser, you may be asked if you wish to open Splashtop for RMM. 

You can launch an SSH connection to the Mac from Naverisk. This will require a local SSH client (puTTY) to be installed on your PC, and SSH will need to be enabled on the Mac. This is done from System Preferences, under Sharing

To start the SSH session, in Naverisk select SSH and optionally select the port (default is 22), then click the Remote Control Icon. 

You may be asked to open NaveriskRCStarter.

Frequently used tasks including remote deployment of software, can be carried out remotely using script packs. Full details on creating and using script packs are available in Applying Scripts. 

​

Remove Mac agents by running the following commands in sequence:
​

Locate the Naverisk Application using ‘Finder’ and move this to the trash. 

sudo launchctl unload /Library/LaunchDaemons/com.naverisk.agent.plist

sudo rm -rf /Library/Naverisk

sudo rm -rf /usr/share/Naverisk

sudo rm -rf /var/root/Library/Logs/Naverisk

sudo rm /Library/LaunchDaemons/com.naverisk.agent.plist

sudo launchctl unload /System/Library/LaunchDaemons/com.naverisk.agent.plist

sudo rm -rf /Library/Naverisk

sudo rm -rf /usr/share/Naverisk

sudo rm -rf /var/root/Library/Logs/Naverisk

sudo rm /System/Library/LaunchDaemons/com.naverisk.agent.plist
​

Log files - /Applications/Naverisk.app/Contents/macOS/Naverisk

Config files - /Applications/Naverisk.app/Contents/MacOS/Naverisk/Agent/

Executable - /Applications/ Naverisk.app/Contents/MacOS

Packages - /Applications/Naverisk.app/Contents/MacOS/Packages/RemoteConsolePackage/ScriptPacks

Service defn - /Library/LaunchDaemons/

Log files - /var/root/Library/Logs/Naverisk/

Config files - /Library/Naverisk/

Executable - /usr/share/Naverisk/

Packages = /usr/share/Naverisk/Packages/

Service defn - /System/Library/LaunchDaemons/
​

sudo launchctl start com.naverisk.agent

sudo launchctl stop com.naverisk.agent (The agent will auto restart following this command)

sudo launchctl unload /Library/LaunchDaemons/com.naverisk.agent.plist (Prevents agent being run)

sudo launchctl load /Library/LaunchDaemons/com.naverisk.agent.plist (Recreate agent service)
​