Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Create Rollout Packages for Juniper Secure Connect Installation


As a system administrator, you can also build your own rollout packages, if required. Building the rollout packages is an optional step. When you create rollout packages for Juniper Secure Connect application, you can install the application across the organization. Read the following steps to learn how you, as a system administrator can prepare the Juniper Secure Connect installer for the software rollout.

Juniper Secure Connect provides the installer for macOS as a disk image (.dmg) file. First you need to mount the package that is located inside the .dmg file. To do this, double-click its icon in the Finder. It should then mount the image and display its contents. You can see the installer package and the uninstall program when you double-click the image file in the Finder window.

Note that the .dmg file is write-protected and as a system administrator you must first convert the .dmg file into a read or write format. You also must convert and resize the image before distributing the installer to users.

  1. Install the Juniper Secure Connect application manually on one device. After the installation is complete, initiate a connection to the profiles to be saved for the users.
  2. Create a folder with name JuniperSecureConnect including the sub-directories as shown below (all directory are case-sensitive):




  3. Copy the ncpphone.cfg file from \Library\Application Support\Juniper\SecureConnect\ folder to the following folder:


  4. Copy your CA certificates to the following folder:


  5. (Optional) To add a custom branding option, follow these steps:
    • Create an .ini file named ProjectLogo.ini that contains the following information:

    • Create a logo in .bmp file format and with cbo.png file name. The width of the image must be 328 pixels only. The height of the image can be adjusted from 24 pixels and above.

    • You can optionally create an HTML file with cbo.html as a file name that will open if the user clicks on the logo in the application.

    • Now copy these three files (ProjectLogo.ini, cbo.png, and cbo.html) into the following folder:


  6. Skip this step, if you are using pre-shared key authentication method.

    For EAP-TLS authentication, you must save the user certificates only with name user.p12 in below directory.


    Ensure that user certificate is unique for each installation package.

  7. On macOS, open the Disk as shown in Figure 1.
    Figure 1: Disk Utility
    Disk Utility
  8. In the menu bar, select Images > Convert as shown in Figure 2.
    Figure 2: Convert an Image
    Convert an Image
  9. Select the image that you would like to use as shown in Figure 3.
    Figure 3: Select Juniper Secure Connect Image
    Select Juniper Secure Connect Image
  10. Select the folder location and save this image with the name of your choice. Change the Image Format to read/write and click Convert as shown in Figure 4.
    Figure 4: Update Image Format
    Update Image Format
  11. Once the conversion is successful, click Done as shown in Figure 5.
    Figure 5: Image Conversion Process
    Image Conversion Process
  12. Unmount this disk in the Disk Utility tool as shown in Figure 6.
    Figure 6: Unmount Process
    Unmount Process
  13. Double-click on the newly created image to get it mounted as shown in Figure 7.
    Figure 7: Mount the new Image
    Mount the new Image
  14. Copy the ImportDir directory to this mounted drive as shown in Figure 8.
    Figure 8: Copy ImportDir Folder To Mount Drive
    Copy ImportDir Folder To Mount
  15. Navigate back to the Disk Utility tool. In the menu bar, select Images > Resize… and then select the file as shown in Figure 9.
    Figure 9: Navigate to Resize Image Option
    Navigate to Resize Image Option
  16. Set the New Size to 1MB, and click Resize as shown in Figure 10.
    Figure 10: Resize Image
    Resize Image

You’ve successfully created the rollout package and ready to distribute Juniper Secure Connect installer. The newly created .dmg file is the installer.