Skip to main content
RMeyer-Spartan
New Member
September 26, 2023
Question

MacOS and Forticlient EMS

  • September 26, 2023
  • 2 replies
  • 2450 views

So with the help of support got the client to deploy and about 90% there, did the cert update in the intuneconfig file as well...one thing that remains is a nagging prompt about certificates that still pops up from the forticlient during managed installation...also I know the client needs full disk access but I am unable to verify that is given via privacy area or profiles...anyone else encounter this?

2 replies

spoojary
Staff
Staff
September 26, 2023

it seems you've made significant progress with deploying the FortiClient on MacOS using EMS, and you've tackled most of the issues. However, the persistent certificate prompt during the managed installation can be due to a discrepancy between the certificate used for deployment and the one recognized by MacOS. It's essential to ensure that the certificate is trusted on MacOS. Additionally, the challenge of verifying full disk access permission for the FortiClient is not uncommon. MacOS restricts certain areas for security, and apps require explicit permission to access them. If you're using mobile device management (MDM) tools like Intune, you can enforce specific privacy settings and profiles. However, if there are uncertainties, consult Fortinet support for advanced troubleshooting.

RMeyer-Spartan
New Member
September 26, 2023

per the docs, I need to install the package associated with the invitation ID manually and grab the cert. Once obtained, the data needs to be inserted into the config file for intune...it doesnt prompt for privacy policies once I applied the config via intune however I cannot validate the settings (sorry I like to see things with my own eyes before I bless it)

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!