topic Re: Deploying Cortex XDR Agent for macOS with VMware Workspace ONE (AirWatch) in Cortex XDR Discussions

Deploying Cortex XDR Agent for macOS with VMware Workspace ONE (AirWatch)

BWilga — Tue, 21 Jun 2022 19:01:41 GMT

In order to deploy the Cortex XDR Agent to macOS you have to have both the Config.xml and Cortex XDR.pkg files bundled in the same deployment file. Workspace ONE does not support the uploading/deployment of a .zip file so you have to use a workaround.

Cortex XDR Agent Application:

1. You will first need to pull the Cortex XDR Uninstaller out of the folder.

2. Open Disk Utility

3. Go to File > New Image, then choose Image from Folder...

4. Select the Cortex XDR folder with just the Config.xml and Cortex XDR.pkg contained inside. (Having the uninstaller in the folder will cause it to fail on deployment)

5. Enter your filename and where to save it. Encryption = none, Image Format = Compressed.

6. New .dmg containing the necessary files will be created. Upload this to Workspace ONE for deployment.

Configuration:

You can use this guide and create your own profile for deployment. Alternatively, you can download the configuration file and import it to Workspace ONE using the Workspace ONE mobileconfig Importer

After deployment the end user will still be prompted saying that System Extensions are needed and a few other pop up prompts. Just select "OK" on all of those and everything will begin syncing and functioning as it should.

Links:

https://support.apple.com/guide/disk-utility/create-a-disk-image-dskutl11888/mac

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-2/cortex-xdr-agent-admin/cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-for-mac-using-jamf

https://flings.vmware.com/workspace-one-mobileconfig-importer