Manual Installation

This document explains the process of installing the Nightfall agent manually.

Prerequisites

1. Ensure that you have root level access to the target macOS device.

2. On your Nightfall console, navigate to https://app.nightfall.ai/endpoint and click the Download Package button on the top right corner of the page. Click Download Package for macOS and unpack the contents of the downloaded file.

3. Create a default policy for web browser uploads and cloud storage application sync.

Installing the Package

1. Locate the mdm_pre_installation_script.sh in the payload downloaded from Nightfall.

2. Open a Terminal window.

3. Run the mdm_pre_installation_script.shscript on your local machine as a root user, by executing the following command.

sudo ./mdm_pre_installation_script.sh

1. Double click the provided nightfall-ai-agent_<version>.pkg.

2. Click Continue.

1. Click Install.

1. Click Use Password to enter your device password and start the installation process.

Once the installation is completed, you get a completion message as shown in the following image.

1. Click Close.

At the top right corner of your screen, you can view the Nightfall AI agent icon which looks as follows.

When you click this icon, you can view the details of the agent.

Grant System Permissions

These system permissions and handled automatically through MDM profiles. For manual install, enabling these permissions manually is required.

Grant Full Disk Access

To monitor your MAC device, you must grant access to the hard disk. This section explains the process of granting disk access.

1. Navigate to System Settings > Privacy & Security > Full Disk Access.

1. If Nightfall is listed, make sure to toggle the permission to ON

2. [Optional] Should Nightfall not be listed in the primary list

   1. Click the + icon at the bottom of the list (you may be prompted to enter your macOS password)

1. Select NightfallAIAgent (under Applications) and click Open.

1. Click Quit & Reopen.

On the Full Disk Access page, ensure that the toggle switch is turned on for the NightfallAIAgent. This ensures that the full disk access is granted.

Grant Accessibility Permissions

For clipboard monitoring, you must grant the Nightfall agent accessibility permissions. This section explains the process.

1. Navigate to System Settings > Privacy & Security > Accessibility.

1. If Nightfall is listed, make sure to toggle the permission to ON

1. [Optional] Should Nightfall not be listed in the primary list

   1. Click the + icon at the bottom of the list (you may be prompted to enter your macOS password)

1. Select NightfallAIAgent (under Applications) and click Open.

1. On the Accessibility settings page, ensure that the toggle switch is turned on for the NightfallAIAgent. This ensures that the full disk access is granted.

Reboot The Agent

To ensure changes are picked up by the agent:

1. Open Activity Monitor > Search of Nightfall > you should see two Nightfall processes running

   1. If you do not see two Nightfall processes, make sure to expand your view to all processes

   
2. Select both process and click Quit, the agent will restart instantly.

Grant Browser Permissions

Apart from the disk access and accessibility permissions, you must also grant permission to the Nightfall AI agent to monitor browser uploads. This section explains the process.

To grant access to browser uploads:

1. Open a browser instance and upload a test file to any destination.

2. When prompted, grant the Nightfall AI agent permissions.

Uninstalling the Nightfall AI Agent

To uninstall the Nightfall AI agent, locate the uninstallation script provided as part of the deployment bundle. You must execute the following command on your MAC device, as a root user.

mdm_nightfall_ai_agent_uninstall.sh