This article describes how to install Carbon Black EDR macOS sensors on endpoints.

Prerequisites

Note: To install a sensors on macOS systems, you must have access to an administrator account.

To have access to the Download Sensor Installer controls for a sensor group, you must be one of the following:

  • A user that is a member of a team that has either the Viewer or Analyst role for the sensor group.

  • For Carbon Black EDR installations, a Global Administrator.

  • For Carbon Black Hosted EDR installations, an Administrator.

Procedure

  1. On the navigation bar of the Carbon Black EDR console, click Sensors.
  2. In the Groups panel, select the sensor group for installing the sensor package.
  3. From the Download Sensor Installer list at the top of the Sensors page, select OSX Standalone PKG. The sensor package file is downloaded to your system.
  4. In the operating system, do the following:
    1. Copy the <install package name>.zip sensor installation package to the macOS endpoint.
    2. Extract the <install package name>.zip file to a temporary folder.
    3. From the extracted .zip file, double-click the .pkg file and follow the installation prompts. You can also launch the .pkg file by using a silent installer. For example: 
      installer -pkg <install package name>.pkg -target /

      This installs the macOS sensor using the configuration that is provided in the sensorsettings.ini file.

Results

After the installation is complete, the macOS sensor is installed and running. The Sensors page shows the sensor as registered and checking into the Carbon Black EDR server.