Overview
This document outlines the procedure for upgrading the Netsweeper Client Filter on macOS devices managed through Jamf. The process ensures a seamless transition to newer versions while maintaining system integrity and filtering functionality.
Prerequisites
- The previous Client Filter version must already be installed on the target machine.
The existing mobileconfig profile must be deployed as a removable system extension.
Standard Upgrade Process
Step 1: Remove the Old Policy
Delete or disable the existing Jamf policy that deploys the previous version of the Client Filter PKG.
Step 2: Upload the New Client Filter PKG
Download the latest Client Filter PKG file.
Upload the new PKG to the Jamf administration console.
Step 3: Create a New Policy
Create a new policy in Jamf using the newly uploaded PKG.
Configure the policy scope to target the appropriate devices or groups.
Step 4: Deploy the New PKG
Execute the new policy to install the updated Client Filter on target devices.
Step 5: Reboot the Device
A system reboot is required after the new PKG installation.
Without a reboot, the device will continue using the previous version’s system extension.
Step 6: Verify Installation
Run the following command in Terminal to confirm the active Client Filter version:
systemextensionsctl listThis process installs the new Client Filter version over the existing installation without requiring manual uninstallation of the older version.
Process for Mobileconfig Configuration Changes
If the mobileconfig profile includes version-specific parameters (e.g., compatibility between versions 11.60, 12.60, and 13.20), follow these steps:
Remove the Old Profile
Uninstall the existing mobileconfig profile from target devices.
Apply the New Mobileconfig
Deploy the updated mobileconfig profile compatible with the new Client Filter version.
Remove the Old PKG Policy
Delete or disable the Jamf policy associated with the previous PKG.
Apply the New PKG Policy
Deploy the new policy to install the updated Client Filter PKG.
Reboot the Device
A restart remains mandatory to activate the new system extension.
Additional Notes
Mobileconfig profiles designed for version 11.60 are generally compatible with version 12.60, and vice versa.
Profiles for versions 11.60 or 12.60 are not compatible with version 13.20 and must be updated accordingly.
Always test the upgrade process in a controlled environment before broad deployment.