Prior to deploying the Cb Response sensor, please ensure you have accounted for the following:

Download the Installation Package

The macOS installer bundle can be accessed via your Red Canary portal on the Endpoints page by clicking Deploy to more endpoints

General Information

The contents of each installer package must be extracted to the same directory prior to installation. The sensorsettings.ini file must reside in the same directory as the installer executable at the time of installation or the installation will fail. Administrative privileges are required to install this software.

  1. Copy the .zip sensor installation package to the Mac OS X endpoint and extract the .zip file
  2. From the extracted .zip file, run the CarbonBlackClientSetup.pkg file by double-clicking on it and following the installation prompts

Silent Installation

You can also install the package silently as follows: 

installer -pkg <path-to>.pkg -target /  

macOS Kernel Extension Approval

As of High Sierra (10.13.x), all 3rd party kernel extensions (kext) must be explicitly allowed to load. See our KB article macOS Kernel Extension Approval for details. 

Did this answer your question?