Carbon Black Cloud: How to Deploy Sensor to Mac With Jamf Pro
book
Article ID: 288915
calendar_today
Updated On: 03-10-2021
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Deploy Carbon Black Cloud Sensor with Jamf Pro on Pre-Big Sur macOS
Environment
- Carbon Black Cloud Sensor: 3.2.x.x thru 3.4.x.x
- Audit & Remediation (was CB ThreatSight)
- Endpoint Standard (was CB Defense)
- Enterprise EDR (was CB ThreatHunter)
- Apple macOS: 10.13.x - 10.15.x
- Jamf Pro: 10.9.x and Higher
Resolution
Create an Approved Kernel Extensions Configuration Profile
- In Jamf management console, select Configuration Profiles > New
- Configure "General" payload
- Configure "Approved Kernel Extensions" payload with the following parameters
- Display Name: Carbon Black
- TEAM ID: 7AGZNQ2S2T
- Approved Kernel Extensions
- DISPLAY NAME: Carbon Black Defense
- KERNAL EXTENSION BUNDLE ID: com.carbonblack.defense.kext
- Scope to appropriate Computers
Create CB Defense Package
- Open "confer_installer_mac-<Version>.dmg" and put "CbDefense Install.pkg" into /Users/Shared/
- Open Composer
- Drag /Users/Shared/ folder into Composer
- Delete all items other than installer within /Users/Shared/
- Create .PKG
- Upload to Jamf Pro
Upload or Create Script
- Open "confer_installer_mac-<Version>.dmg"
- Open "docs" folder
- Upload "cbdefense_install_unattended.sh" to Jamf Pro using Jamf Admin
OR
- Edit "cbdefense_install_unattended.sh"
- Copy contents and create a new Script in Jamf Pro
- Edit
- CBD_INSTALLER="/Users/Shared/CbDefense Install.pkg"
- COMPANY_CODE='<company_code>'
Create Policy to Deploy Carbon Black Defense
- In Jamf management console, select Policies > New
- Configure "General" payload
- Configure "Packages" payload
- Select package created above
- Configure Scripts
- Select script created above
- Scope to appropriate computers
Feedback
Was this article helpful?
thumb_up
Yes
thumb_down
No