Recent Searches

No recent searches

    Popular Articles

      Articles
      View all
        Topics
        View all
          Tickets
          View all
            no results

            Sorry! nothing found for

            Deploying CrowdStrike as a Custom App

            By Emalee Firestein

            Learn how to deploy the CrowdStrike Falcon agent to your macOS devices as a custom app

            Prerequisites

            Intel-based Mac computers only require the KEXT version of the Crowdstrike settings profile when using Crowdstrike's Firmware Analysis feature. If you are not using Firmware Analysis, we recommend using the non-KEXT versions of the custom settings below.
            • CrowdStrike installer from the vendor (Hosts > Sensor Downloads)
            • Crowdstrike Custom Settings
            • CrowdStrike Service Management Profile
            • CrowdStrike Audit Script (GitHub Link)
            • CrowdStrike Postinstall script (GitHub Link)

            Considerations

            • The CrowdStrike Settings Profile is designed to facilitate CrowdStrike approval across all network content filters, kernel extensions, system extensions, PPPC, and web-filtering requirements. This profile is compatible with both the older Falcon agent using kernel extensions and the latest version utilizing system extensions.

            • The CrowdStrike Service Management Profile handles essential login and background processes.

            • If you require it, the Legacy System Extension (KEXT) Settings Profile can be accessed via this GitHub link.

              • This profile supports both the Falcon agent with kernel extensions and the newer version with system extensions. 

              • The KEXT payload is necessary only when using the CrowdStrike Firmware Analysis feature on Intel-based Mac computers.

            • Please note that depending on the specific CrowdStrike product and version you have installed, there may be variations in app paths, privacy access settings, and kernel or system extension requirements. As with any custom application, we strongly recommend thorough testing before deploying it to a production Mac.

            Add and Configure the Custom Settings Profile

            1. Navigate to Library in the left-hand navigation bar.
            2. Click Add New on the top-right, and choose Custom Profile.
            3. Click Add & Configure.
            4. Give your Custom Profile a Name.
            5. For Install on, select Mac.
            6. Assign to your desired Assignment Maps or Classic Blueprints.
            7. Upload the CrowdStrike Settings Profile (or Legacy System Extension (KEXT) settings profile).
            8. Click Save.

            Add and Configure the Service Management Profile

            The service management profile for Crowdstrike Falcon is compatible with macOS 13 Ventura and later. For macOS Monterey 12 and earlier, an Assignment Map must be used for advanced scoping to prevent the service management profile from being assigned to those devices. To learn more about using rules in Assignment Maps, see our Advanced Assignment Maps Configuration support article.
            1. Navigate to Library in the left-hand navigation bar.
            2. Click Add New on the top-right, and choose Custom Profile.
            3. Click Add & Configure.
            4. Give your Custom Profile a Name.
            5. For Install on, select Mac.
            6. Assign to your desired Assignment Maps or Classic Blueprints. If using Assignment Maps, configure the Assignment Rules in your conditional block to ensure the profile is only installed on Mac computers running macOS Ventura and later.
            7. Upload the profile that you downloaded previously from GitHub.
            8. Click Save.

            Add and Configure the Custom App

            1. In the left-hand menu, click on Library.
            2. Near the top-right, click Add New.
            3. Select Custom App.
            4. Click Add & Configure.
            5. Give the Custom App a Name. Optionally, add a custom icon.
            6. Assign to your desired Assignment Maps or Classic Blueprints.
            7. Change the Installation to Audit and Enforce.
            8. Copy and paste the crowdstrike_ae_script.zsh script from the prerequisites into the Audit & Enforce text box. No modification is required.
            9. Select Installer Package (install .pkg or .mpkg) as the deployment type
            10. Upload the installer package.
            11. Paste the Postinstall Script referenced in the Prerequisites.
              • In the Post-Install script, update the customerIDChecksum variable on line 55 with your Customer ID
              • Optionally, paste your install token on line 59 inside the installToken variable; otherwise, leave it blank.
            12. Click Save.


            Preview
            0 of 0