Trying to install Kaspersky on Mac

[GTP]

Mac OS 12.3 Sierra
Trying to install Kaspersky Total Security for Mac but getting error:

“Certificate used to sign package is not trusted. Use –allowUntrusted to override.”

I have tried this command (in Terminal) "sudo spctl --master-disable" to temporarily give back the option to install from "anywhere" in the Security window, but still fails.

I've tried crawling through Kaspersky support articles and Google, but no luck.

Any help appreciated.

 

[GTP]

It sounds like an expired code-signing certificate. Two things to check:

1. Is the date correct on the Mac?

2. Is it an up-to-date installer for Kaspersky?

Thanks @Computer Bloke Time and date correct (first thing checked) and downloaded kismac16.0.0.245 dmg from Kaspersky about 15 minutes before hand.

 

[Markverhyden]

Did you go into System Preferences>Security & Privacy> select radio button allow from anywhere? Sounds suspicious to be honest.

I just downloaded it - file name ksm16.0.0.245c-043.dmg Have from anywhere selected and did not get a cert error.

Info

 

[GTP]

Did you go into System Preferences>Security & Privacy> select radio button allow from anywhere? Sounds suspicious to be honest.

I just downloaded it - file name ksm16.0.0.245c-043.dmg Have from anywhere selected and did not get a cert error.

Info
View attachment 7003

Thanks @Markverhyden In Sierra, that option was removed (apparently) as it wasn't there when I checked. I briefly read on an Apple forum that it had been removed.
I was able to restore the setting with the command sudo spctl --master-enable but still got the error.
The version I have is kismac16.0.0.245. I notice the version you have is ksm16.0.0.245c-043.dmg?
Maybe different version for US/AU?

 

[Markverhyden]

Thanks @Markverhyden In Sierra, that option was removed (apparently) as it wasn't there when I checked. I briefly read on an Apple forum that it had been removed.
I was able to restore the setting with the command sudo spctl --master-enable but still got the error.
The version I have is kismac16.0.0.245. I notice the version you have is ksm16.0.0.245c-043.dmg?
Maybe different version for US/AU?

After running the CLI did you go back into that area? That command causes the option to show up.

http://osxdaily.com/2016/09/27/allow-apps-from-anywhere-macos-gatekeeper/

 

[GTP]

After running the CLI did you go back into that area? That command causes the option to show up.

http://osxdaily.com/2016/09/27/allow-apps-from-anywhere-macos-gatekeeper/

Yes, I went back to check and the option was already selected.
Tried setting a date in future Dec 2, 2017 but wouldn't move past the error. (from Kaspersky Support)

 

[Markverhyden]

I'd be careful about forcing an install for cert reasons for a company like that. Did you upload the dmg to virustotal.com?

 

[GTP]

Yes, said it was "clean"
I'm downloading again from Kaspersky (same version number?) So I'll try it again.

It all takes a lot longer without a decent internet connection!

 

[lotonah]

I've had the same problem on multiple computers this morning. Here's what worked for me:

In terminal, enter the following:
sudo spctl --master-disable

After that, open up the .DMG file like you normally would. Instead of double-clicking on the installer icon, either right-click on the icon or <control>-click on the installer in order to get a contextual menu.

Next, select “Show Package Contents”

Navigate to the actual installer:
>Contents>Packages>Kaspersky Internet Security.pkg

Double click on that, and the next dialog box with appear. You want to “Show Certificate”.

At the bottom of the next dialog, you want to change “Use System Defaults” to “Always Trust”. After accepting that change, the dialog box will disappear and a blank Installer will appear. Select “Continue” and carry on, just like you would do for a normal install.

Hope that helps.

 

[GTP]

In terminal, enter the following:
sudo spctl --master-disable

Already did that.

After that, open up the .DMG file like you normally would. Instead of double-clicking on the installer icon, either right-click on the icon or <control>-click on the installer in order to get a contextual menu.

Next, select “Show Package Contents”

Navigate to the actual installer:
>Contents>Packages>Kaspersky Internet Security.pkg

Double click on that, and the next dialog box with appear. You want to “Show Certificate”.

At the bottom of the next dialog, you want to change “Use System Defaults” to “Always Trust”. After accepting that change, the dialog box will disappear and a blank Installer will appear. Select “Continue” and carry on, just like you would do for a normal install.

Thank you, client has taken the comp already, but will bring it back next week. I'll try all this then, although "always trusting" a certificate is not a good thing!
Thanks again!
BTW, had Kaspersky Support on the phone, said nothing about this?

 

[lotonah]

Since it just started happening Friday morning, I'm assuming that Kaspersky Support was not aware of it happening yet?