# Installation Process - Silent

### Downloading the macOS Installation Package

To download the macOS installation package log in to the dope.console. From the top right-hand corner select the download button <img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FNalvdvMR2rGfsunPSm4V%2F7.0-endpoint-download_icon.png?alt=media&#x26;token=07a31fe6-156b-41fe-a12a-bb5388a13e0a" alt="" data-size="line">. This will provide the different dope.endpoint installation packages available for download.

In the case of macOS, the dope.endpoint has one universal installation package that supports:&#x20;

• Apple Intel \
• Apple Silicon (Native)

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2F3pxQC4JbcJzilSnM1dn6%2Fgitbook-endpoint-2023_2.png?alt=media&#x26;token=bc97991a-9f4a-4502-a420-8c724391bec6" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
This page is for a device where a Mobile Device Management (MDM) profile has **not** been installed. To install on a device with an MDM profile installed see [installing-using-mdm-on-mac](https://inflight.dope.security/dope.endpoint/installing-using-mdm-on-mac "mention")
{% endhint %}

### Select the installer package for your device

After selecting the installation package you require, a ZIP file will be downloaded to your device. The ZIP file will be called **dope\_security*****\_mac\_\<processor type>\_\<build number>.zip***

The ZIP file will contain the following three files:

* dope.security-\<build number>.pkg — The dope.endpoint installer.
* dope.security.crt — The dope.security Root CA, required for SSL inspection.
* agent\_parameters.json — Tenant-specific data required for the installation process.

{% hint style="warning" %}
All three files must be in the same directory or the installation will FAIL.
{% endhint %}

To install the dope.endpoint go to a terminal and enter the following command:&#x20;

```
sudo installer -pkg dope.security-<build number>.pkg -target /
```

Running this command will kick off the installation process but with no UI. There will be a prompt to allow the installation to start:&#x20;

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2Ff5A1nfjLL8bY16Cd1AAU%2Fgitbook-screenshots_4.png?alt=media&#x26;token=37431163-34e7-4071-8a48-9bc82fa4153e" alt=""><figcaption></figcaption></figure>

There will be a prompt to allow the dope.security Root CA to be installed:

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FlQ92Jp85tUKk1nMuGXsI%2Fgitbook-screenshots_5.png?alt=media&#x26;token=cd52e98f-eed6-43b9-a949-d089cca3a8fd" alt=""><figcaption></figcaption></figure>

The final prompt is to allow the dope.security application to run. There's a prompt to open the macOS security and preferences settings:&#x20;

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2Ftzpp0A41kup5mlwzWWw8%2Fgitbook-screenshots_6.png?alt=media&#x26;token=0b114158-3379-4488-a395-6535e7726c38" alt=""><figcaption></figcaption></figure>

Open the security preferences dialog box. Run the dope.security application:&#x20;

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FV4tRhF6tSjYstwevg6aE%2Fgitbook-screenshots_7.png?alt=media&#x26;token=1dae16d9-8176-4e32-9aa6-ae8c707390dc" alt=""><figcaption></figcaption></figure>

Once these steps are complete a dope.security icon can be seen in the macOS menu bar <img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FSfZe1q4TUkI4Q9MQOUrY%2Fds-app_status.png?alt=media&#x26;token=76f8bb2a-1ba7-476b-ae8b-7fd36aa3e94d" alt="" data-size="line">.

{% hint style="info" %}
All of the prompts above will not appear on a device where a MDM profile has been installed. For more details see [installing-using-mdm-on-mac](https://inflight.dope.security/dope.endpoint/installing-using-mdm-on-mac "mention").
{% endhint %}

When the dope.endpoint has been successfully installed, and endpoint authentication has been enabled (see: [users](https://inflight.dope.security/dope.console/settings/users "mention")), one of these dialogs will be displayed prompting you to login via either your Google or Microsoft O365 corporate email.

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2F62dHDRT7GdPvaGLABklp%2Fgitbook-installer-mac_SSO.png?alt=media&#x26;token=104de838-a7eb-420e-91c5-eb9eb13f63d4" alt=""><figcaption><p>Google Login Example</p></figcaption></figure>

Log in with the appropriate corporate email address.

{% hint style="info" %}
&#x20;Multi Factor Authentication (MFA) will also be required if enabled
{% endhint %}

Once the user has successfully authenticated, the dope.endpoint will be configured with the dope policy you have assigned them in the dope.console. If you have not assigned them a specific policy, they will automatically be assigned the Base Policy.

To check that the authentication was successful, simply click on the <img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FSfZe1q4TUkI4Q9MQOUrY%2Fds-app_status.png?alt=media&#x26;token=76f8bb2a-1ba7-476b-ae8b-7fd36aa3e94d" alt="" data-size="line"> icon in the menu bar. This will show the following information including the logged-in user.

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FdejMLT69a7cpOqWk2GjV%2Fgitbook-endpoint-2023_7.png?alt=media&#x26;token=b78ed946-005b-4576-b6e6-8bdd3e141721" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Where endpoint authentication has **not** been enabled (see: [users](https://inflight.dope.security/dope.console/settings/users "mention")) the user will not be prompted to authenticate and will get the Base Policy.
{% endhint %}