Carbon Black Cloud: How to Deploy Sensor to Mac With Jamf Pro
search cancel

Carbon Black Cloud: How to Deploy Sensor to Mac With Jamf Pro


Article ID: 288915


Updated On:


Carbon Black Cloud Endpoint Standard (formerly Cb Defense)


Deploy Carbon Black Cloud Sensor with Jamf Pro on Pre-Big Sur macOS


  • Carbon Black Cloud Sensor: 3.2.x.x thru 3.4.x.x
    • Audit & Remediation (was CB ThreatSight)
    • Endpoint Standard (was CB Defense)
    • Enterprise EDR (was CB ThreatHunter)
  • Apple macOS: 10.13.x - 10.15.x
  • Jamf Pro: 10.9.x and Higher


Create an Approved Kernel Extensions Configuration Profile

  1. In Jamf management console, select Configuration Profiles > New
  2. Configure "General" payload
  3. Configure "Approved Kernel Extensions" payload with the following parameters
    • Display Name: Carbon Black
    • Approved Kernel Extensions
    • DISPLAY NAME: Carbon Black Defense
    • KERNAL EXTENSION BUNDLE ID: com.carbonblack.defense.kext
  4. Scope to appropriate Computers

Create CB Defense Package

  1. Open "confer_installer_mac-<Version>.dmg" and put "CbDefense Install.pkg" into /Users/Shared/
  2. Open Composer
  3. Drag /Users/Shared/ folder into Composer
  4. DeleteĀ all items other than installer within /Users/Shared/
  5. Create .PKG
  6. Upload to Jamf Pro

Upload or Create Script

  1. Open "confer_installer_mac-<Version>.dmg"
  2. Open "docs" folder
  3. Upload "" to Jamf Pro using Jamf Admin


  1. Edit ""
  2. Copy contents and create a new Script in Jamf Pro
  3. Edit
  4. CBD_INSTALLER="/Users/Shared/CbDefense Install.pkg"
  5. COMPANY_CODE='<company_code>'

Create Policy to Deploy Carbon Black Defense

  1. In Jamf management console, select Policies > New
  2. Configure "General" payload
  3. Configure "Packages" payload
  4. Select package created above
  5. Configure Scripts
  6. Select script created above
  7. Scope to appropriate computers

Additional Information

  • Environment section includes confirmed versions; these steps may work with earlier versions of Jamf and Carbon Black Cloud Sensor as well
  • All items called out above as <Value> should be replaced with actual values, including <>
    If Company Registration Code is 1a@b3c$d5e6f7g8h9i0j
    COMPANY_CODE=<company_code> becomes COMPANY_CODE='1a@b3c$d5e6f7g8h9i0j'