How to manually install the EPM macOS agent

This document provides guidance on how to install the EPM macOS agent using the system installer and grant the necessary macOS permissions.

Access path

1. Download the installer from PAM Solutions.
2. In Finder, locate the .pkg file.
3. Double-click to open the installer.

Installation wizard

1. Click Continue and then Install.
2. Enter the backend parameters:
   • Backend address: provide the hostname or IP.
   • Token: paste the configuration token.
     • Download the token in the Segura® platform, go to: EPM > Management > Settings > Parameters > EPM > Installation settings > Vault token.
3. When prompted, enter the administrator password.
4. If macOS blocks the installation (Gatekeeper), go to System Settings > Privacy & Security and select Allow or Open Anyway for the agent’s developer.
5. Once complete, finish with Close/Finish.

macOS permissions

1. Go to System Settings > Privacy & Security and click Allow to approve the vendor’s system extension.
2. Go to System Settings > General > Login Items and enable the agent’s items.
3. Go to System Settings > Privacy & Security > Full Disk Access, add the agent, activate the switch, and keep it enabled.
4. Restart macOS after granting permissions, if requested.

Review

• Check the agent icon (menu bar) or the processes in Activity Monitor.
• Trigger Update Policies (when available).
• In the EPM console, confirm that the device appears as Online and is receiving policies.