Nightfall macOS Agent Deployment: Mosyle MDM

Below is a step-by-step guide to deploy the Nightfall Endpoint DLP agent for macOS using Mosyle MDM.

Pre-Requisites

1. Target macOS devices are onboarded and managed through your MDM.

2. You have defined a device group to target your deployment to.

Step 1: Deploy Nightfall’s Custom Profile

1. Unpack the zip file provided and locate the NightfallAI_Profile.mobileconfig file in the Profiles folder.

2. Navigate to Management > Configuration Profiles.

3. Click the Upload button and upload NightfallAI_Profile.mobileconfig.

4. Configure the settings for your configuration profile.

5. In the Scope tab, add the target devices or device groups to which this profile should be deployed.

6. Click Save.

Once assigned, the profile will be automatically deployed to target machines.

Step 2: Upload the Nightfall .pkg to Mosyle CDN

1. On Mosyle, navigate to Management > Install PKG > CDN.

2. Upload the nightfall-ai-agent-signed.pkg.

3. This creates a unique CDN reference, e.g.: %MosyleCDNFile:d4d8f767-3f99-4747-8041-253ea90c462d%

Step 3: Custom Command

1. Unpack the zip file provided and locate the mdm_pre_installation_check_script.sh file in the mdm_scripts folder.

2. On Mosyle, navigate to Management > Custom Commands.

3. Paste the content of mdm_pre_installation_check_script.sh into the script editor.

4. Update the script as follows:

   1. Remove the exit 0 line at the bottom of the script.

   2. Append the following block at the end of the script:

      # Define variables
      PKG_URL="%MosyleCDNFile:<your-pkg-id-here>%"  # Replace with your actual Mosyle CDN variable
      SAVE_PATH="/tmp/nightfall-ai-agent-signed.pkg"
      
      # Download and install the agent
      curl -L "$PKG_URL" -o "$SAVE_PATH"
      installer -pkg "$SAVE_PATH" -target /
      
      # Do NOT include `exit 0` or `exit 1`

   3. Update the MosyleCDNFile variable with the unique entry generated from the previous step.

5. Target the command to desired devices group

6. Click Save.

How to Perform an Upgrade

1. Upload the new version of the .pkg file to the same Install PKG entry in Mosyle.

2. Update the CDN variable in the script accordingly.

3. Re-save the custom command profile to trigger an update on target devices.