Jamf for macOS

You can use your Jamf tool to mass deploy the Insight Agent to collections of macOS assets in your organization.

Install the macOS Insight Agent installer for mass deployment

Before you can mass deploy the agent, you must download the macOS version of the Rapid7 Insight Agent installer from the Rapid7 platform. Make sure you have the correct installer for your environment, typically available in .pkg format for macOS.

If necessary, use tools like Jamf Composer to package the installer. Use an Apple Developer Account for certificate signing, which is necessary for deploying software on managed macOS devices.

Create the Deployment Package Using Jamf Composer

  1. Launch Jamf Composer on a macOS device with administrative access and full disk access enabled.
  2. Drag and drop the Rapid7 Insight Agent installer into Jamf Composer. This action converts the installer into a source that Jamf can deploy.
  3. If the installer is not already in .pkg format, use Composer to create a package that can be deployed. This step involves bundling the necessary files and signing them with your Apple Developer certificate.
  4. Use the Build as PKG option in Jamf Composer to compile the package.
  5. Choose a location to save the final .pkg file.

Deploy the Package Using Jamf Now

  1. Log into your Jamf Now account and go to the Apps section.
  2. Upload the .pkg file created previously to the Jamf Now app repository.
  3. After the package is uploaded, go to the Blueprints section of Jamf Now.
  4. Add the newly uploaded Rapid7 Insight Agent package to the appropriate Blueprint that applies to the target macOS devices.
  5. Assign the Blueprint to the macOS devices within your Jamf Now environment. Jamf Now will automatically handle the distribution and installation of the Insight Agent across all devices assigned to this Blueprint.

Check Agent Installation Status

After deployment, check the devices to ensure that the Rapid7 Insight Agent is installed and functioning correctly.

  1. Use Jamf's management tools to monitor the installation process and confirm that the Agent is reporting as expected.
  2. On one of your target devices, open activity monitor and search for ir_agent to confirm it is present and running.