Setup CrowdStrike on MacOS

There are two ways to install the CrowdStrike EDR on MacOS: manually via a graphical interface or automatically via the command line. If you want to deploy the EDR on a large scale using the automatic method, we recommend starting with a manual test installation on a few endpoints.

Executable and customer ID

• Download the executable from this link.

• Find your customer ID on the Endpoint page > Settings.

Manual method

First, install the binary provided above, named FalconSensorMacOS.LionLanner.pkg.

A graphical interface will open automatically:

• Enter your Customer ID (CID)

• Leave the Installation Token field blank

• Click Continue

• Click Configuration and then Allow

• Similarly, the next step will ask you to allow the application in the security settings. Click Configuration, then in System settings under Security, click Allow under The loading of the Falcon application system software has been blocked.

• Click Continue, and the installation will complete automatically.

Automatic deployment on your MDM

First, install the binary provided above, named FalconSensorMacOS.LionLanner.pkg.

Open a terminal and run the following command on your MDM, replacing customer_ID with your customer ID: sudo /Applications/Falcon.app/Contents/Resources/falconctl license customer_ID

The EDR is now automatically activated with your CID.