Browse Docs
ONLINE DOCUMENTATION

Deployment via Addigy

This guide covers deploying the DefensX Agent to macOS devices managed by Addigy. The process uses shared scripts applicable to all customers, plus separate configuration profiles for the CA certificate, DNS Proxy extension, and customer-specific deployment settings.

Tip
 Steps 2–5 are customer-agnostic and only need to be set up once. To deploy to a new customer or deployment, only repeat Step 5 with the corresponding mobileconfig file. For new devices under an existing customer, simply update the policy assignments in Step 6.

Step 1: Download Required Files

Log in to the DefensX backend and navigate to Policies & Groups. Under the Deployments section, locate your deployment and click the RMM button.

rmm

In the RMM dialog, click Mac MDM and download the following files:

File How to Download

DefensX-installer.sh

Click Download Installer Script

DefensX-CA.cer

Click Download DefensX-CA Certificate → As PEM encoded

DefensX-DNSProxy-Extension.mobileconfig

Click DNS Proxy Extension mobileconfig

DefensX-[deployment].mobileconfig

Click Download mobileconfig

DefensX-uninstaller.sh

Click Download Uninstaller Script

Keep all files available — they are needed in the steps below.

Step 2: Add the Installer Script

In Addigy, both the install and uninstall scripts are configured together as a single Smart Software entry in the Catalog.

  • Navigate to Catalog → Software and click New.

  • Enter DefensX Installer as the Software Name. The version field can be left as 1.0.

    defensx installer

  • Open DefensX-installer.sh in a text editor and paste its contents into the Installation Command field.

  • Open DefensX-uninstaller.sh in a text editor and paste its contents into the Removal Command field under the Options section.

    defensx uninstaller

  • Click Save.

Step 3: Create the CA Certificate Configuration Profile

  • Navigate to Catalog → Device Settings and click New.

    profile install new

  • Click Certificates.

  • Enter DefensX CA Certificate as the Payload Name.

  • Select pem as the Certificate type.

  • Click Select Certificate and upload DefensX-CA.mobileconfig.

  • Click Create Profile to complete.

    ca create profile

Step 4: Create the DNS Proxy Extension Configuration Profile

This profile grants the DefensX DNS Proxy Network Extension the permissions it needs to operate without prompting users for approval. It enables DNS policy enforcement without modifying system-level DNS settings.

  • Navigate to Catalog → Device Settings and click New.

  • Click Custom Profile.

    custom profile

  • Leave Deployment channel set to Device.

  • Ensure macOS is checked and iOS and tvOS are unchecked.

  • Click Select .mobileconfig and upload DefensX-DNSProxy-Extension.mobileconfig.

    select mobileconfig

  • Click Create Profile.

Step 5: Create the Customer-Specific Configuration Profile

This profile delivers the unique deployment key and browser settings for a specific customer. Each DefensX deployment has its own mobileconfig file containing the relevant Deployment Key.

  • Navigate to Catalog → Device Settings and click New.

  • Click Custom Profile.

  • Leave Deployment channel set to Device.

  • Ensure macOS is checked and iOS and tvOS are unchecked.

  • Click Select .mobileconfig and upload the DefensX-[deployment].mobileconfig file downloaded in Step 1.

  • Click Create Profile.

Step 6: Assign to a Policy

With all components created, assign them to the appropriate policy.

  • Under the Policies menu, click the policy you want to deploy DefensX to.

  • Click Device Settings and check DefensX CA Certificate, DefensX DNS Proxy Extension, and the customer-specific profile created in Step 5.

  • Click Add/Remove and select Add to policy.

    add to policy

  • Click Software, then check DefensX Installer under the Smart Software section.

  • Click Add/Remove and select Add to policy.

  • Click Deploy Now to push the installation immediately.

    deploy now

Uninstalling DefensX

To uninstall DefensX, remove all assignments added in Step 6.

  • Under the Policies menu, click the policy you want to remove DefensX from.

  • Click Device Settings and uncheck DefensX CA Certificate, DefensX DNS Proxy Extension, and the customer-specific profile.

  • Click Add/Remove and select Remove from policy.

  • Click Software, then uncheck DefensX Installer under the Smart Software section.

  • Click Add/Remove and select Remove from policy.

  • Click Deploy Now to trigger the uninstallation immediately.
Secure Industries, Inc 101 Avenue of The Americas, Floor 9 New York, NY 10013