# Mac Installer

### Download the macOS Installation Package

The dope.endpoint [universal installer](#user-content-fn-1)[^1] runs on both Apple Intel and Apple Silicon Native (M1, M2 etc).

To download the macOS installation package, log in to the dope.console, and click the download button <img src="/files/Wc4LHdftFbxVLfSUu865" alt="" data-size="line"> in the top right:

<figure><img src="/files/x9atVD7TaV3gVz1SO19t" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
This page explains installations where MDM has **not** been configured. To configure MDM, see [Installing using MDM on Mac](/dope.endpoint/installing-using-mdm-on-mac.md).
{% endhint %}

### Install the package on your device

After downloading the installer, extract the ZIP (***dope\_security\_mac\_\<build number>.zip).*** It contains three files:

* dope\_security\_\<build number>.pkg — The dope.endpoint installer.
* dope.security.root.crt — The dope.security Root CA, required for SSL inspection.
* agent\_parameters.json — Tenant-specific data required for the installation process.

{% hint style="warning" %}
All three files must be in the same directory or the installation will **FAIL**
{% endhint %}

Double click on the PKG file to launch the Installer:

<figure><img src="/files/EVBaSSV2wbqnICppWPDb" alt=""><figcaption></figcaption></figure>

Click Continue. A new screen will appear:

<figure><img src="/files/BwrWGYJbPj4LMSTU0naQ" alt=""><figcaption></figcaption></figure>

There will be a prompt to allow the dope.security Root CA to be installed:

<figure><img src="/files/eGtHOxBdZEuIfBNqdOJi" alt=""><figcaption></figcaption></figure>

### Manually approve the extension

Once these steps are complete a dope.security icon can be seen in the macOS menu bar <img src="/files/mRDElIB1vd9SEV3sMraO" alt="" data-size="line">.

{% hint style="info" %}
This dialogue could be hidden due to MDM, if so

MacOS 15: manually approve in: System Settings -> General -> Login Items & Extensions

MacOS 14: manually approve in Privacy & Security

Remember, to remove manual approvals you must [add an MDM profile](/dope.endpoint/installing-using-mdm-on-mac.md)
{% endhint %}

{% hint style="danger" %}
In MacOS 15, you must scroll down System Settings -> General -> Login Items & Extensions **all the way** to Extensions and find Network Extensions:\
\
![](/files/f4BoV04tJpEcEjRYMDdb)\
\
![](/files/WGpV16miKMV0drFA1hHU)

Remember, to remove manual approvals you must [add an MDM profile](/dope.endpoint/installing-using-mdm-on-mac.md)
{% endhint %}

The final prompts allow the dope.security application exstension to run. You should see a prompt to open settings:

<figure><img src="/files/XhAkmXzTJ2McbZWvQSuX" alt="" width="372"><figcaption><p>Without MDM, MacOS requires manual approvals</p></figcaption></figure>

Open the security preferences dialog box.

On MacOS 14 and lower, you will see the following:

<figure><img src="/files/yiaRMALqFfIPIBk7WNTy" alt="" width="375"><figcaption><p>System Settings Dialog in MacOS 14 "requires attention"</p></figcaption></figure>

On MacOS 15, this will open a different area with similar manual approval:

<figure><img src="/files/9rq0V0OV3nkPmNB4mBgQ" alt="" width="563"><figcaption></figcaption></figure>

Toggle to allow DopeSecurityApp to run:

<figure><img src="/files/eMZvUgZPCWafSQtbMtsV" alt="" width="375"><figcaption></figcaption></figure>

Finally, you will be prompted with a warning that the dope app will filter web traffic, again select to allow.

{% hint style="warning" %}
If you accidentally clicked **Don't Allow**, re-prompt the message by Option ⌥ + click the DS icon in the menu bar, and clicking **Quit.** It will re-open and prompt you again.
{% endhint %}

<figure><img src="/files/F3rnvYdULXagHCBfCQjb" alt="" width="375"><figcaption><p>Allow DopeSecurityApp to filter traffic</p></figcaption></figure>

{% hint style="info" %}
Prompts do not appear on devices that have the [dope MDM profile](/dope.endpoint/installing-using-mdm-on-mac.md) installed. On these deployments, the experience is completely invisible to the end-user.
{% endhint %}

If endpoint authentication has been enabled (See [Users](/dope.console/settings/users.md)), the user will be required to authenticate with M365 or Google credentials.

[^1]: Single installer Intel + Apple Silicon builds are known as Universal Installers


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://inflight.dope.security/dope.endpoint/mac-installer.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.