Mac Agent Installation

Important Information

To fully manage macOS devices - including patching, application visibility, and deploying Mac OS Updates - you need to install both a Patching Profile and the Workflow Agent.

The .PKG (agent installer) can be installed on macOS devices running OS X 10.11 or later and requires administrative rights to complete the installation.

Prerequisites 

An online device.

Admin privileges on the Mac (for agent installation).

Guided walk-through: Install the MacOS Patching Agent

Option 1: Manual Profile Enrollment

Click 'Add Device' and choose 'Mac OS Agent' > Mac OS Patching Agent

Under Profile For All Devices, select a user from the dropdown.

This is required to generate the profile download link, even if the user won’t be used on the device.

Click 'Download' to get the profile file.

Install the profile on the Mac manually.

The device should appear in the console.

Option 2: Self-Enrollment

Click 'Add Device' and choose 'Mac OS Agent' > Mac OS Patching Agent

Copy the Self Enrollment link:

https://[your instance name]/SelfEnrollment

Send this link via email to end users

Users can follow the link and install the profile on their devices.

Once installed, the device is enrolled and ready to receive update commands.

Guided walk-through:Install the MacOS Workflow Agent

To enable deep management capabilities (like scanning, scripting, and visibility), install the appropriate agent for the device type:

Option 1: Download for Apple Silicon Devices

Click 'Add Device' and choose 'Mac OS Agent' > Mac OS Workflow Agent

Click  'Download ARM' button.

Execute the PKG under local system/root credentials. 

 You must accept any prompts regarding security and provide an administrator password to continue.

The device should appear in the console.

Option 2: Download for Intel Devices

Click 'Add Device' and choose 'Mac OS Agent' > Mac OS Worflow Agent

Use the separate download link labeled for Intel devices or click  'Download x64' next to it.

Execute the PKG under local system/root credentials. 

 You must accept any prompts regarding security and provide an administrator password to continue.

The device should appear in the console.