sentinelone EDR agent through hexnode uem (macOS)Solved

Hi @koushik, thanks for raising the question!

Deploying the SentinelOne EDR agent on macOS devices via Hexnode UEM involves a few coordinated steps to ensure the agent installs silently without prompting the end user for permissions.

Here is a brief overview of the process:

1. Prepare the Installation PackageFirst, you will need to wrap the SentinelOne installer file and your license token script into a single DMG file. Once created, upload this DMG to your Hexnode app inventory as an Enterprise App.
2. Configure Security PoliciesBefore pushing the app, you must grant SentinelOne the necessary system level permissions. You will do this by configuring multiple sections within a macOS policy:
   • Privacy Preferences: Add the specific SentinelOne bundle identifiers to grant them Full Disk Access.
   • System Extensions and Kernel Extensions: Add the SentinelOne Team ID to allow its background processes to run seamlessly. You will configure System Extensions for Macs running macOS 10.15 and newer, and Kernel Extensions for older Macs running macOS 10.14 and earlier.
   • Deploy Custom Configuration: Upload a custom XML profile to manage notification settings and web content filtering.
3. Push the AppWithin that same policy, add the SentinelOne DMG file under Required Apps. Once you associate this policy with your Macs, Hexnode will apply the permissions and install the agent seamlessly.

For a complete step by step walkthrough including the exact bundle identifiers, the required Team ID, and the XML payload for the custom configuration please follow our official documentation here: Deploy SentinelOne on macOS devices using Hexnode UEM

I hope this helps streamline your SentinelOne deployment!

Regards,
Eden Pierce
Hexnode UEM