Nightfall Agent Deployment with Rippling MDM

This document explains the process of installing Nightfall AI agent using the Rippling MDM.

Pre-requisites

1. Target macOS devices are onboarded.

2. You have received and unpacked the Nightfall Endpoint payload.

3. Locate the following .mobileconfig files in your Nightfall Endpoint payload package

   • NightfallAI_ApplicationSystemEvents.mobileconfig

   • NightfallAI_Notification.mobileconfig

   • NightfallAI_PPPC.mobileconfig

4. Navigate to https://app.rippling.com/hardware/configurations and click “Add configurations”.

5. Upload and save provided config profiles.

   • Drop or select NightfallAI_PPPC.mobileconfig .

   • Configuration name: “Nightfall AI PPPC”

   • Configuration description: “Nightfall AI PPPC profile”

   • Platform: “macOS”

   • Click Save & continue.

   • Repeat the above for all remaining .mobileconfig profiles provided.

6. Select Deploy from the three-dot context menu located on the far right of the first profile.

   • Select all employees or specific target devices.

   • Click Save.

7. Repeat step 4 for each remaining profiles.

To install the Nightfall agent in stealth mode (without notifing the end-user), see #stealth-installation.

1

Step 1 - Create & Deploy Profiles

In this step, you will create a custom profile for each of the profiles provided in your Nightfall endpoint payload.

1. Locate the following .mobileconfig files in your Nightfall Endpoint payload package.

   • NightfallAI_ApplicationSystemEvents.mobileconfig

   • NightfallAI_Notification.mobileconfig

   • NightfallAI_PPPC.mobileconfig

2. Navigate to https://app.rippling.com/hardware/configurations and click Add configurations.
3. Upload and save provided config profiles.

   • Drop or select NightfallAI_PPPC.mobileconfig.

   • Configuration name: “Nightfall AI PPPC”

   • Configuration description: “Nightfall AI PPPC profile”

   • Platform: “macOS”

   • Click Save & continue.

   • Repeat the above for all remaining .mobileconfigprofiles provided.

4. Select Deploy from the three-dot context menu located on the far right of the first profile.

   • Select all employees or specific target devices.

   • Click Save.

5. Repeat step 4 for each remaining profile.

2

Step 2 - Configure & Deploy Software Package

Step 2.1 - Create & Configure the Software Package

1. Navigate to: https://app.rippling.com/hardware/software
2. Click Upload Software on the right of the page.

   • Name: “Nightfall Endpoint DLP Agent <version>”

     • <version> is the version of the package your received from Nightfall.

   • Operating System: “macOS”

   • Category: “My Uploads” (Default)

   • Description: “Nightfall Endpoint DLP Agent”.

   • Upload Icon: use the .png icon file provided.

   • Upload Installer File: drop or select the provided nightfall-ai-agent-signed.pkg file.

   • Install-check script: provided in your package as mdm_pre_install_check_script.sh

   • Pre-install script: provided in your package as mdm_pre_installation_script.sh

   • Click Submit.

   • Click Add on the newly created Software Item.

   • Click Finished Selecting.

Step 2.2 - Deploy the Nightfall Endpoint DLP Agent

1. Search or scroll to the newly added item matching the name you used in the previous step.

   a. Click Edit.

   i. Select all employees or specific target devices.

ii. Click Save.

The Nightfall Endpoint DLP Agent will now deploy to all selected target devices. This may take up to 72 hours and is dependent on the endpoint devices being turned on, connected, and pre-requisite profiles deployed.

Upgrading to a New Version

The below describes the steps to upgrade endpoints with a new version of the agent:

1. Search or scroll to the old version of the Nightfall Endpoint DLP Agent and click “Edit”.

   a. Remove all devices from the installation list and click “Save”.

2. Follow the steps to configure the new software package for the new version
3. Follow these steps to deploy the new version.

The Nightfall Endpoint DLP Agent will now deploy to all selected target endpoints. Installation may take up to 48 hours and is dependent on the endpoint devices being turned on and connected.