Okay I could manage to deploy the cert + a script via:
I added this to a product and the 2 files are getting deployed. But the script fails to execute....
2020-05-27T16:33:40+0200 INF Action Type - Execute Script: /private/tmp/script.sh, isLocalScript: 1 executeAsRoot: 1
2020-05-27T16:33:40+0200 ERR Script execution failed in root context. Error: /private/tmp/script.sh: /private/tmp/script.sh: cannot execute binary file
I want to do this by the script:
sudo security add-trusted-cert -r trustRoot -k "/Library/Keychains/System.keychain" "/private/tmp/myCA.crt"
Can anybody tell me how the script needs to look like to be successfully executed?
shabsn -- have you tried uploading the certificate in a macOS device profile? You should be able to upload a certificate there and have it placed into the System keychain.
When creating macOS profiles, "User" profiles affect the login keychain while "Device" profiles affect the System keychain.
Yes but its only adding a "Certificate Setting" to the keychain. Not the Certificate itselfs.