All new users onboarded after 01.02.2023 will be able to use a universal MacOs agent for both Intel and M1/M1+ CPUs.
To install the Secfix Agent unsing MDM MS Intune (MS Endpoint Manager), admins can:
Roll out Secfix Agent pkg installer for MacOs devices (via Intune or MED)
Roll out Secfix Agent MSI installer for Windows devices (via Intune or MED)
The instructions for MSI for Windows distributions are identical with PKG for for MacOs, thus, these won’t be provided.
Prerequisites for the roll-out of the Secfix Agent via Microsoft Intune
A working Active Directory structure with users and groups. For more information, see Create a basic group and add members using Azure Active Directory.
Account privilege requirement: Global Administrator or an Intune Service Administrator. For more information, see Role-based access control (RBAC) with Microsoft Intune.
Enrolled Windows devices to Microsoft Intune or Endpoint Manager. For more information, see:
Troubleshoot MSI Deployment via Microsoft Intune or Endpoint Manager, see:
pkg installer for MacOs devices via Microsoft Intune
1. As admin, Login to the Secfix portal and go to the Me Page.
2. Download the agent installer you want to roll out (M1 or Intel) under the Me Page > M1 or Intel (as of 01.01.2023 Secfix Agent is universal and works for both models)
3. Log in to Intune as a Global Administrator or as an Intune Service Administrator. Go to Microsoft Azure Portal > Microsoft Intune > Apps > By Platform (left hand-side navigation) > MacOs | MacOs Apps
3. Click Add, and select Line-of-business app from the Select app type section. Click Select.
4. Under the Add app section, click on Select app package file, and select the installation file that you have on your local machine.
5. Select the file. Microsoft Intune reads the installer and shows the file information. Click OK.
6. Under App Information, specify the following information:
Name: Secfix MacOs Agent
Description: Secfix MacOs Agent
Publisher: Secfix
Ignore app version: No
Show this as a featured app in the Company Portal: Yes
Leave the rest as default
Click Next
ℹ️ For more information, please refer to MacOs Apps to MS Intune.
7. Keep Scope Tags at default. Click Next.
8. Under Tab Assignment, select if you want to add the Agent as Required or Available for enrolled devices (we recommend to set it as required) by adding a Group of users or All Users (we recommend to add group).
ℹ️ Select the groups for which you want to make this app required. Required apps are installed automatically on enrolled devices. Some platforms may have additional prompts for the end user to acknowledge before app installation begins like UAC.
9. Click on Create + Review tab. Wait for the pkg. package to be uploaded completely.
The Agent installation will begin. Sometimes it will require sometime until Intune downloaded all agents. Alternative: Users can access Agent installer under the Company Portal on Intune.
10. Check under Monitoring > Computers if the new agent was enrolled and listed on the Secfix platform.
11. The Microsoft Intune administrator can view the deployment status of the Secfix MacOs Agent once the package is ready.
pkg installer for MacOs devices via Microsoft Endpoint Manager Admin Center
1. As admin, Login to the Secfix portal and go to the Me Page.
2. Download the agent installer you want to roll out (M1 or Intel) under the Me Page > M1 or Intel (as of 01.01.2023 Secfix Agent is universal and works for both models)
3. Log in to Microsoft Endpoint Manager Admin center portal. Go to > Apps > By Platform (left hand-side navigation) > MacOs | MacOs Apps
4. Click Add, and select Line-of-business app from the Select app type section. Click Select.
5. Under the Add app section, click on Select app package file, and select the installation file that you have on your local machine.
5. Select the file. Microsoft Intune reads the installer and shows the file information. Click OK.
6. Under App Information, specify the following information:
Name: Secfix MacOs Agent
Description: Secfix MacOs Agent
Publisher: Secfix
Ignore app version: No
Show this as a featured app in the Company Portal: Yes
Leave the rest as default
Click Next
ℹ️ For more information, please refer to MacOs Apps to MS Intune.
7. Keep Scope Tags as default. Click Next.
8. Under Tab Assignment, select if you want to add the Agent as Required or Available for enrolled devices (we recommend to set it as required) by adding a Group of users or All Users (we recommend to add group).
ℹ️ Select the groups for which you want to make this app required. Required apps are installed automatically on enrolled devices. Some platforms may have additional prompts for the end user to acknowledge before app installation begins. Some platforms may have additional prompts for the end user to acknowledge before app installation begins like UAC.
9. Click on Create + Review tab. Wait for the pkg. package to be uploaded completely.
The Agent istallation will begin. Sometimes it will require sometime till Intune downloaded all agents. Alternative: Users can access Agent installer under Company Portal in intuine.
10. Check under Monitoring > Computers if the new agent was enrolled and listed on the Secfix platform.
11. The Microsoft Intune administrator can view the deployment status of the Secfix MacOs Agent once the package is ready.
MSI installer for Windows devices via Microsoft Intune
1. As admin, Login to the Secfix portal and go to the Me Page.
2. Download the agent installer you want to roll out (M1 or Intel) under the Me Page > M1 or Intel (as of 01.01.2023 Secfix Agent is universal and works for both models)
3. Log in to Microsoft Endpoint Manager Admin center portal. Go to > Apps > By Platform (left hand-side navigation) > Windows | Windows Apps.
3. Click Add, and select Line-of-business app from the Select app type section. Click Select.
4. Under the Add app section, click on Select app package file, and select the installation file that you have on your local machine.
5. Select the file. Microsoft Intune reads the installer and shows the file information. Click OK.
6. Under App Information, specify the following information:
Name: Secfix Windows Agent
Description: Secfix Windows Agent
Publisher: Secfix
Ignore app version: No
Show this as a featured app in the Company Portal: Yes
Leave the rest as default
Click Next
ℹ️ For more information, please refer to Windows Apps to MS Intune.
7. Keep Scope Tags at default. Click Next.
8. Under Tab Assignment, select if you want to add the Agent as Required or Available for enrolled devices (we recommend to set it as required) by adding a Group of users or All Users (we recommend to add group).
ℹ️ Select the groups for which you want to make this app required. Required apps are installed automatically on enrolled devices. Some platforms may have additional prompts for the end user to acknowledge before app installation begins. Some platforms may have additional prompts for the end user to acknowledge before app installation begins like UAC.
9. Click on Create + Review tab. Wait for the pkg. package to be uploaded completely.
The Agent installation will begin. Sometimes it will require sometime till Intune downloaded all agents. Alternative: Users can access Agent installer under Company Portal in Intune.
10. Check under Monitoring > Computers if the new agent was enrolled and listed in Secfix platform.
11. The Microsoft Intune administrator can view the deployment status of the Secfix MacOs Agent once the package is ready.