Deploy Cloudflare WARP on all macOS devicesSolved

Participant
Discussion
4 days ago Jul 22, 2026

I’m trying to make sure Cloudflare WARP gets installed on every Mac enrolled in Hexnode. The installer is available as a macOS .pkg, but I’m not sure what the correct workflow is in Hexnode to push it to all devices automatically. Is this something that can be enforced silently through a policy?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
4 days ago Jul 22, 2026
Marked SolutionPending Review

Yes @ruthg_, you can deploy Cloudflare WARP to macOS devices by adding the Cloudflare macOS installer package as an Enterprise App and assigning it through a Required Apps policy.

Follow these steps:

  1. Download the Cloudflare WARP macOS installer package in .pkg format from Cloudflare’s official source.
  2. In the Hexnode portal, go to Apps.
  3. Click Add Apps and choose Enterprise App.
  4. Select macOS as the platform.
  5. Upload the Cloudflare .pkg file, fill in the required app details, and save it.

After adding the app to the repository:

  1. Go to Policies.
  2. Create a new policy or edit an existing macOS policy.
  3. Navigate to macOS > App Management > Required Apps.
  4. Click Add, select the Cloudflare app from the app repository, and add it to the policy.
  5. Open the Policy Targets tab.
  6. Assign the policy to the required macOS devices, users, or device groups.
  7. Save the policy.

Once the policy is associated, Hexnode will push the Cloudflare installer to the targeted Macs. If the app is not already installed, the installation is initiated in the background without requiring user interaction.

Best Regards,
Isabel Lora
Hexnode UEM

Marked SolutionPending Review
Participant
4 days ago Jul 22, 2026
Marked SolutionPending Review

Would it be better to target individual Macs or use a group for this? I’m still testing and don’t want to miss any newly enrolled Mac later.

Marked SolutionPending Review
Hexnode Expert
4 days ago Jul 22, 2026
Marked SolutionPending Review

Using a device group is usually the better option, especially if the goal is to keep Cloudflare installed across the full Mac fleet. If you have a group that contains all macOS devices, assign the Mandatory Apps policy to that group.

For ongoing deployments, a dynamic device group for macOS devices is useful because newly enrolled Macs that match the group criteria can receive the same policy automatically. This avoids manually adding each new device to the policy target list.

Best Regards,
Isabel Lora
Hexnode UEM

Save