Downloading the CYRISMA Agent

To download the CYRISMA Agent package:

1. Log in to your CYRISMA instance.
2. Navigate to Admin > Scan Agents.

1. Choose the appropriate installer based on your Mac's architecture:
   • Intel x64: CyBroker_Installer.pkg
   • Arm 64 (Apple M1/M2/M3): CyBroker_Installer_Arm64.pkg

Granting Full-Disk Access to the Installer

Important Note: Before running the installer, ensure you provide full-disk access to the installer to avoid potential permission issues.

1) Open System Preferences:

• Click on the Apple menu in the top left corner of your screen and select System Preferences.

2) Click on Security & Privacy.

3) Unlock Settings:

• Click the lock icon in the bottom left corner and enter your admin password to make changes.

4) Click on the Privacy tab.

5) Scroll down in the left pane and select Full Disk Access.

6)  Add Installer to List:

• Click the plus (+) button and navigate to the Applications folder.
• Locate and select Installer.app or the specific installer you downloaded.
• Locate and select Terminal.

7) Restart Terminal:

• After granting full-disk access, restart any open terminal windows.

Installation Instructions for Mac with SIP Enabled (macOS 10.15 and Later)

Log in with Admin Rights
Ensure you are logged in with administrative rights on the device.

Download the Installer
Download the correct package from the Admin > Scan Agents section in CYRISMA.

Prepare the Installation

Open Terminal.

Change the directory to the Downloads folder by typing:

cd ~/Downloads

Create a Temporary File for Credentials
Since SIP is enabled, you cannot use setenv commands, so you'll need to create a temporary file to store the CYRISMA key and URL:

Run the following commands to create the file:

echo "CY_KEY=1234-5678-90AB" > /tmp/cyrisma_env.txt
echo "CY_URL=https://cc12ab34.cyrisma.com" >> /tmp/cyrisma_env.txt

Run the Installer
In the terminal, execute the following command to start the installation:

sudo installer -pkg CyBroker_Installer.pkg -target /

Post-Installation
Once the installation is successful, CyBroker will be installed under /Applications/Cyrisma/.

Installation Instructions for Mac with SIP Disabled (macOS Versions Before 10.15)

Log in with Admin Rights
Ensure you are logged in with administrative rights on the device.

Download the Installer
Download the CyBroker_Installer.pkg package from the Admin > Scan Agents section.

Run the Installer Using setenv

Open Terminal.

Change to the Downloads directory by typing:

cd ~/Downloads

Execute the following command:

sudo launchctl setenv cy_key 1234-5678-90AB cy_url https://cc12ab34.cyrisma.com && sudo installer -pkg CyBroker_Installer.pkg -target /

Post-Installation Steps

Log in to CYRISMA

• Log in to your CYRISMA instance and navigate to Admin > Scan Agents.
• Click on the New Agent button to add the newly installed agent.

Assign the Agent

• The installed machine should appear in the list of agents.
• Select whether the agent will only perform local scans or network-based scans:
  • For local scans: Answer "Yes" to Agent only runs local scans?
  • For network-based scans: Answer "No" and provide network Service Account credentials.

Mass Deployment Using PowerShell Script

For mass installation, especially through RMM tools, you can use a custom script. Here's a sample script to automate the installation:

#!/bin/bash

# Constants
CY_KEY="XXXXXX"
CY_URL="XXXXXX"
DOWNLOAD_URL="https://dl.cyrisma.com/6167656E7473/Cyrisma_Setup.pkg"
DOWNLOAD_PATH="/tmp/CyBroker_Installer.pkg"
ENV_FILE="/tmp/cyrisma_env.txt"
LOG_FILE="/var/log/cybroker_installation.log"

# Function to log messages
log() {
    echo "$(date) - $1" >> "$LOG_FILE"
}

# Write CY_KEY and CY_URL to the environment file
echo "CY_KEY=$CY_KEY" > "$ENV_FILE"
echo "CY_URL=$CY_URL" >> "$ENV_FILE"

# Download the file using curl
log "Downloading CyBroker package from $DOWNLOAD_URL"
sudo curl -o "$DOWNLOAD_PATH" "$DOWNLOAD_URL"

# Check if the download was successful
if [ $? -eq 0 ]; then
    log "Download successful. Installing CyBroker."
    sudo installer -pkg "$DOWNLOAD_PATH" -target /
    
    if [ $? -eq 0 ]; then
        log "CyBroker installation complete."
    else
        log "Installation failed. Check installation logs for more details."
    fi
else
    log "Download failed. Check your internet connection or the download URL."
fi

Ensure that the CY_KEY and CY_URL values are replaced with your actual instance details before running the script.

Conclusion

Once installed, the CYRISMA Agent will appear under Admin > Scan Agents in the CYRISMA instance. The agent will auto-update as new versions are released. If you need to install the agent on multiple devices, you can use the provided script for automation.