Manual Installation

This document explains the process of installing the Nightfall agent manually.

Prerequisites

1. Ensure that you have root level access to the target macOS device.

2. Download the Nightfall agent deployment bundle from https://app.nightfall.ai/endpoint.

3. Create a default policy for web browser uploads and cloud storage application sync.

To install the Nightfall agent in stealth mode (without notifing the end-user), see #stealth-installation.

Installing the Package

1. Locate the mdm_pre_installation_script.sh in the payload provided by Nightfall.

2. Open a Terminal window.

3. Run the mdm_pre_installation_script.shscript on your local machine as a root user, by executing the following command.

sudo ./mdm_pre_installation_script.sh

1. Double click the provided nightfall-ai-agent_<version>.pkg.

2. Click Continue.

1. Click Install.

1. Click Use Password to enter your device password and start the installation process.

Once the installation is completed, you get a completion message as shown in the following image.

1. Click Close.

At the top right corner of your screen, you can view the Nightfall AI agent icon which looks as follows.

When you click this icon, you can view the details of the agent.

Grant Full Disk Access

To monitor your MAC device, you must grant access to the hard disk. This section explains the process of granting disk access.

1. Navigate to System Settings > Privacy & Security > Full Disk Access.

1. If Nightfall is listed, make sure to toggle the permission to ON

2. [Optional] Shoud Nightfall not be listed in the primary list

   1. Click the + icon at the bottom of the list (you may be prompted to enter your macOS password)

1. Select NightfallAIAgent (under Applications) and click Open.

1. Click Quit & Reopen.

On the Full Disk Access page, ensure that the toggle switch is turned on for the NightfallAIAgent. This ensures that the full disk access is granted.

Reboot The Agent

To ensure changes are picked up by the agent:

1. Open Activity Monitor > Search of Nightfall > you should see two Nightfall processes running

2. Select both process and click Quit

3. The agent will restart instantly

Grant Permission to Monitor Uploads

Apart from the disk access, you must also grant permission to the Nightfall AI agent to monitor browser uploads. This section explains the process.

To grant access to browser uploads:

1. Open a browser instance and upload a test file to any destination.

2. When prompted, grant the Nightfall AI agent permissions.

Uninstalling the Nightfall AI Agent

To uninstall the Nightfall AI agent, you must execute the following command on your MAC device, as a root user.

mdm_nightfall_ai_agent_uninstall.sh