Manual Installation

This method of installing the Sensor is recommended for testing purposes only and is not supported by Cyberhaven.

To operate successfully, Cyberhaven needs several privacy permissions on the endpoint device which can be granted by deploying an MDM profile. However, if you choose to manually install the Sensor, you must manually make the changes to the endpoint device's configuration by running the configure.zsh script after installation.

1. Download Cyberhaven from the Endpoint Sensors page of the Cyberhaven dashboard and open the .pkg installer file to install like a regular macOS package.

2. By default, the Cyberhaven macOS Sensor retrieves the backend URL from the MDM profile. If the MDM profile has not been deployed, you must set the backend URL manually using the configure.zsh script. To do this, open the Cyberhaven Console and navigate to Endpoint Sensors > Sensor Installers > macOS. Locate the line that starts with sudo backend, then click the "+" icon to copy the full command to your clipboard.

3. Open a Terminal window, paste the command then hit "return". The install script will run and install the macOS sensor.

   NOTE

   After manually installing the macOS Sensor on a device, it may appear as "Non-functional Sensor" on the Endpoint Sensors page within the Cyberhaven Console, even though the Sensor is operating as intended. To confirm that the Sensor is active, check the "Last Active" column on the Endpoint Sensors page, which shows the most recent activity timestamp for the device.

4. After installation, the following permissions must be granted in the macOS Privacy & Security preferences: Accessibility, Automation, and Full Disk Access. Users may be prompted to approve these permissions immediately or later, depending on when they first use certain apps (such as Safari, Chrome, Outlook, or Finder).

5. You must also manually install the browser extensions as they are otherwise deployed via MDM profile installation.