This post covers the steps to deploy Pulse Secure desktop client using SCCM. First of all let me provide some details about pulse secure desktop client. The Pulse Secure desktop client provides a secure and authenticated connection from an endpoint device to a Pulse Secure gateway. The endpoint device could be a Windows 10 client or mac computer. The pulse secure gateway could be either Pulse Connect Secure or Pulse Policy Secure.
There is something called Pulse Connect Secure, which is a mobile VPN to enable secure access from any device to enterprise apps and services in the data center or cloud. I have seen some large enterprises using pulse secure desktop clients. So I thought of posting a deployment guide of pulse secure desktop client using SCCM.
At the time of writing this post, the latest version of pulse secure desktop client is 5.3R6. Probably you can get the latest installer and still the same deployment steps should work. You can also find the latest version of pulse secure desktop client here. Most of all Pulse Secure Desktop client is available for download as 32-bit and 64-bit installers. However in this post I will cover the deployment of client along with preconfiguration file. With preconfiguration file you can define settings such URI, server ID, GUID etc. When you deploy a preconfiguration file along with client, the user sees those connections when app is launched. In addition if you specify more than one connections in preconfiguration file, the user can connect to any of those connections.
How to deploy Pulse Secure Desktop Client using SCCM
To deploy Pulse Secure desktop client using SCCM, follow the below steps. I have got the 64 bit installer with me and along with that I have got a batch file and a preconfiguration file. The batch file includes the commands to install pulse secure desktop client. The commands included in the batch file are listed below. Copy the commands to a file and save it with .bat extension.
mkdir c:\pulse\ copy pulsesecure-x64.msi c:\pulse\ copy Company.jnprpreconfig c:\pulse\ msiexec -i "c:\pulse\pulsesecure-x64.msi" CONFIGFILE="c:\pulse\Company.jnprpreconfig" /l*v "%windir%\Logs\PulseSecure_Install.log" /q del c:\pulse\pulsesecure-x64.msi PING 127.0.0.1 -n 1 -w 5000 >NUL del c:\pulse\Company.jnprpreconfig rmdir c:\pulse\
Launch configuration manager console. Go to Software Library > Overview > Application Management > Applications. Create a new application and select Manually specify the application information. Click Next.
Specify app details and click Next.
Some more details if you want to add here. Click Next.
Add a new deployment type and select Manually specify the deployment type information.
- Specify content location.
- Input Installation program command.
- Specify Uninstall program command.
Add a detection method to detect the presence of app. Choose the setting type as Windows Installer. Click Browse and select the msi installer and that will automatically pick product code. Click Next.
Specify the settings for user experience. Click Next.
On the remaining steps, click Next and on completion page, click Close.
You have packaged the pulse secure desktop client using SCCM. Furthermore distribute the application to distribution point and deploy it to a device collection. When you see the app in software center, it’s ready to install. Click Install button.
Open AppEnforce.log file to monitor installation of app. The batch file that we specified installs the app as per the commands specified in it. I have tested almost both installation and uninstallation of app and it works flawlessly. In case you encounter any errors, let me know in the comments section.