This section describes how to deploy the Carbon Black Cloud macOS sensor through Workspace ONE UEM.

Note:

The steps can vary based on the specific version of macOS, Carbon Black Cloud macOS sensor, and Workspace ONE UEM that you are using. This content was created using macOS Big Sur 11.1, Workspace ONE UEM 2101, and the Carbon Black Cloud macOS sensor version 3.5.1.19.

Extension Types

Starting with macOS 11, the Carbon Black Cloud macOS sensor (v3.5.1) operates by default in user-space by using System Extensions (user-space) instead of Kernel Extensions (KEXTs) that were used in prior versions. As a result, some functionality is temporarily unavailable when using the sensor in System Extension mode on macOS 11 and later versions. Using the sensor in KEXT mode achieves the same functionality on macOS 11 as seen in older operating systems. Differences in functionality are listed at .

Prerequisites

  • Workspace ONE UEM with permissions to manage devices and applications
  • Carbon Black Cloud console access and admin account credentials
  • An endpoint running macOS to test the integration