Addigy provides many options for installing third-party software including Webroot security software. To install Webroot silently, you must already have valid Webroot license keys.

Before Installing

With the advent of macOS 10.13 High Sierra, Apple introduced User Approved Kernel Extension Loading (UAKEL). This means that kernel extensions (also called kexts or security extensions) must be approved before they can be installed. To learn more about UAKEL, see some of Apple's documentation: Technical Note TN2459: User-Approved Kernel Extension Loading.

Because Webroot requires kexts to be installed, you will need to configure an MDM Profile and MDM Configuration for Kernel Extension Whitelist to bypass the user dialog that is normally required to approve a kext. For instructions on enabling these features within Addigy, see our support article: Addigy Mobile Device Management (MDM) Integration and Approved MDM Profiles.

If a valid Kernel Extension Whitelist has been deployed before installing the software, then users will not be prompted to approve any security extension and the installation will be completely silent.

Installing Webroot

To install Webroot, create new Smart Software within Addigy. For more information on how to set up a Smart Software, see our support article: Creating Smart Software.

Here is the necessary Installation script for your Smart Software:

#set -x
export TERM=xterm
#Set Keycode for Clients

OS_Version_major=$(sw_vers -productVersion | cut -d '.' -f1)
OS_Version_minor=$(sw_vers -productVersion | cut -d '.' -f2)

if [ $OS_Version_major == 10 ] && [ $OS_Version_minor -ge 15 ] || [ $OS_Version_major == 11 ];

   cd /tmp; curl -O
   hdiutil attach -nobrowse /tmp/wsamacsme.dmg
   sudo rm -f /Library/PrivilegedHelperTools/com.webroot.InstallerHelperTool
   sudo "/Volumes/Webroot SecureAnywhere/Webroot" -keycode=$KEY install -language=en -silent || True


   cd /tmp; curl -O
   hdiutil attach -nobrowse /tmp/wsamacsme.dmg
   sudo "/Volumes/Webroot SecureAnywhere/Webroot SecureAnywhere" install -keycode=$KEY -language=en -silent


diskutil unmount /Volumes/Webroot\ SecureAnywhere
rm -rf /tmp/wsamacsme.dmg

if [ ! -e "/Applications/Webroot" ]; then
    echo "There was an issue with the installation"
    exit 1


  • Replace the 1111-1111-1111-1111 with your valid license key.
  • Because the script handles downloading the latest version of Webroot, no files need to be uploaded to this Smart Software.

Adding a Condition Script

Additionally, a Condition script can be added so that this software is enforced on a recurring basis as part of an Addigy policy.

Here is a simple Condition script that checks for the Webroot application on the device:

if [ -d "/Applications/Webroot" ]; then
    echo "Webroot already installed. Skipping installation."
    exit 1
    echo "Webroot not found. Installing..."
    exit 0

Note: this Condition script assumes that the Install on Success setting is toggled ON.

If you have followed this guide for installing Webroot, and are experiencing issues during the installation or would like someone to review your Smart Software before deploying it, please reach out to the Addigy Support team for additional help.

If you have an Addigy account and have additional questions, you can create a ticket by emailing

Alternatively, you can submit a support request within Addigy.