As we know, in order to deploy apps with Intune on macOS the app needs to be a signed .pkg file wrapped into a .intunemac file.
From Adobe Admin console we can create a pkg file containing the Adobe CC app or other Adobe apps if needed. Unfortunately this file is not signed, and multiple forum threads confirm that signing them is not supported.
So how do we get around that? I was searching around to find a proper solution. I couldn’t find anyone who had come up with a solution, so I decided to find one my self. What if we don’t sign the Adobe CC pkg file it self but wrap it into another pkg file and run the Adobe CC pkg as a postscript? I did that and it’s actually working!
Creating the package on Adobe Admin Console
Go to http://adminconsole.adobe.com and login with your credentials. Go to packages and click Create a Package.
Follow the guide, create a package and download it. Once downloaded run the Adobe Package Downloader.
After download has finished you’ll get a ZIP file with some folders, and within the Build folder the .pkg file is. This file is what we are gonna use in this guide along with a script. I renamed the Adobe CC macOS_Install.pkg to AdobeCCmacOS_Install.pkg because I had some issues with the script later on when the name had spaces.
How to run a pkg file as a post script in another pkg file?
First we need a tool called packages. It can be downloaded from here: http://s.sudre.free.fr/Software/Packages/about.html
View my previous post to see how to get started with this tool: https://larsstaal.com/2019/11/03/packaging-and-signing-macos-apps-for-distribution-with-intune/
Open packages and select Distribution package in the initial screen.
Next give it a name and choose a location
Click on the package name on the left side and then go to Scripts
Click on the + sign in the button and find the Adobe CC pkg file downloaded from Adobe Admin Console previously. I had problems when the .pkg file had spaces in the name, so I’d suggest renaming it to remove spaces prior to doing this.
Now we need a postscript to kick off the Adobe CC installer.
Open TextEdit, click on Format and then Make Plain Text. This enables us to save the file as a .sh file.
I used this script, change the .pkg file to match the one downloaded/renamed:
#! /bin/sh Sudo installer -pkg ./AdobeCCmacOS_Install.pkg -target /
Paste it in and save it as a .sh file.
Now back in packages click the plus sign to add the script file
Last click on post-installation script and add the script here as well.
We’ll end up with a Scripts page looking like this:
We’re almost done, in the top bar click Build and Build or just hit command+B
Now all there’s left it to sign the package, convert it to intunemac using the App wrapper util. I’m not gonna go into detail on that. In my previous post I’ve described how to sign them:
Per Larsen have a good post on how to wrap pkg into intunemac format:
Follow those and deploy the package to the desired users/Macs.
When it is installed it will show on in Applications on a “folder” containing Adobe Creative Cloud launcher and uninstaller.
That’s it 🙂