Nightfall macOS Agent Deployment: PDQ SimpleMDM

Below is a step-by-step guide to deploy the Nightfall Endpoint DLP agent for macOS using PDQ's SimpleMDM.

Pre-Requisites

1. Enroll devices in PDQ SimpleMDM

2. Create a Device Group with the respective macOS machines assigned to it

3. Download and unpack Nightfall's install package from the console:

   • Integrations > Manage (Endpoint Windows) > Download Package > click "Download Package"

PDQ SimpleMDM does not have the ability to run a job to deploy in a specific order. Due to this, follow the steps below explicitly so as to make sure the agent has the appropriate permissions during install.

Step 1: Deploy the Script

1. From within SimpleMDM, navigate to Scripts > click “Scripts” > click “Create Script”

2. Name: Nightfall Pre-Installation Script

3. Click “Choose File”

   1. Select the “mdm_pre_installation_script.sh” from the mdm_scripts folder that was downloaded from the Nightfall Console.

4. Create a job.

   1. Navigate to Scripts > click “Job” > click “Create Job”

   2. Name: Deploy Nightfall Pre-Install Script

   3. Script: Select the “Nightfall Pre-Installation Script”

   4. Run on: Select the Group

   5. Run Options: Select “Run ASAP”

   6. Click “Create”

Step 2: Deploy the Profile

1. Navigate to Configs > click “Profiles” > click “Create Profile”

2. Select “Custom Configuration Profile”

   1. Name: Nightfall Profile

   2. Uncheck “Install via Declarative Management”

      In testing there were issues with profile deployment unless this was unchecked.

   3. Mobileconfig: Click “Choose File”

   4. From the mac_bundle folder, navigate to “profiles” > select “NightfallAI_Profile_with_Browser_Extensions.mobileconfig”

   5. OS: Only select “macOS”

   6. Navigate to the “Groups” tab

   7. Click “Assign Group”

   8. Select the group > click “Assign”

3. Navigate back to “Profile” tab > click “Save”

Step 3: Deploy the Agent

1. Navigate to Apps & Media > click “Catalog” > click “Add App” > select “Custom App”

2. From the mac_bundle folder, locate the “nightfall-ai-agent-signed.pkg” > click “Open”

3. Click the “Groups” tab > click “Assign Groups”

   • Install Method: MDM

   • Install Type: Auto

   • Groups: (select group)

4. Click “Assign”

5. Click “Done”