Ò»±¾µÀÎÞÂë

Complete all the steps below to complete the installation process on Apple computers running macOS 13 (Ventura) or newer.

Begin Installation

1. Uninstall from your computer, if applicable.
2. Download .
3. Double-click the downloaded file.
4. Click Continue, then follow the prompts to complete the installation.
5. Enter the username and password you use to log on to your machine, then click Install Software.
6. If prompted, click OK to allow the Installer.app to continue.
7. Click Continue.
8. When prompted, enter your Customer ID with Checksum and leave the optional Installer Token blank. 
   Note: If your departmental technology support has given you a Customer ID with Checksum, enter it here. Otherwise, use the Token in your Order Details. Navigate to Your Account/Orders within the to locate it.
   
9. Click Continue.

Enable the Network Filter

1. The CrowdStrike Falcon Network Filter must be enabled during installation. When prompted, click Setup to continue.
2. Click Allow to grant Falcon access to filter network content. 
3. When the status checkbox turns green, click Continue.

Load the System Extension

1. Click Setup to load the system extention.
2. Click Open System Settings and then click the slider to enable the extension.
3. Enter the username and password you use to log on to your machine, then click OK, and then Done.
4. When the status checkbox turns green indicating Crowdstrike loaded the extension, click Continue.

Grant Full Disk Access

1. Click System Settings when asked to grant full disk access.
2. Click the slider to enable full disk access.
3. Enter the username and password you use to log on to your machine, and click Modify Settings.
4. Close the System Settings window and return to the CrowdStrike Falcon Sensor Setup window. When the status checkbox turns green indicating you have granted full disk access, click Continue.

Grant Access to Bluetooth

Falcon Sensor requires access to Bluetooth to function. Even if you see a green check during setup, you must grant access manually.

1. Click System Settings when prompted to open the Bluetooth system settings.
2. Click + and enter your username and password. 
3. Navigate to the Applications folder, select Falcon application, and click Open to grant Falcon access to Bluetooth.

Complete Installation

1. Click Quit to Reopen if prompted. 
2. When Falcon reopens, ensure you see three green checkmarks, indicating the sensor is operational and correctly configured.
3. Click Close to complete installation.

Verify CrowdStrike Is Running

Crowdstrike Falcon supports Apple's current operating system and the two prior releases. If you are running macOS 12 (Monterey) or older, contact the Computing Services Help Center for support at it-help@cmu.edu or 412-268-4357 (HELP).

1. If you have existing antivirus software running on your computer, uninstall it. Note: Windows Defender does not need to be uninstalled.
2. Download .
3. Double-click the FalconSensorWinOS installation file.
4. Allow the installer to continue.
5. Accept the License agreement.
6. When prompted, enter your Customer ID with Checksum. 
   Note: If your departmental technology support has given you a Customer ID with Checksum, enter it here. Otherwise, use the Token in your Order Details. Navigate to Your Account/Orders within the   to locate it. 
7. Click Install.
8. Click Yes and then Close.

Verify CrowdStrike Is Running

Step 1: Verify if SecureBoot is Enabled

1. Open a terminal window and enter the following command:
   
   sudo mokutil --sb-state
   
2. Press Enter.
3. If you receive the response SecureBoot Enabled, continue to Step 2: Install the Certificate for SecureBoot Signing Certificate.
4. If you receive the response SecureBoot Disabled, skip to Step 3: Install CrowdStrike Falcon Sensor.

Step 2: Install the SecureBoot Signing Certificate

1. The signing certificate is included in your download. 

2. Open a terminal window and enter the following, replacing <FULL_PATH> with the location where the certificate was downloaded. This will import CrowdStrike's certificate.
   
   sudo mokutil --import <FULL_PATH>
3. Press Enter.
4. Create a mokutil password when prompted. Note: This is separate from your Andrew password and will be used only once after your next reboot.
5. Press Enter.
6. Reboot your machine.
7. You may be prompted to enter the Machine-Owner Key (MOK). Enter the password you created above.
8. Press Enter.
9. Continue to Step 3: Install CrowdStrike Falcon Sensor.

Step 3: Install CrowdStrike Falcon Sensor

1. In the terminal, enter the following, replacing <FULL_PATH> with the location where you downloaded the install file.
   
   

   Ubuntu:

   sudo dpkg -i <FULL_PATH>



   RHEL, CentOS, Amazon Linux:

   sudo yum install <FULL_PATH>
   
2. Press Enter.
   
3. In the terminal, enter the following, replacing <CID> with Customer ID (CID) with Checksum.
   Note: If your departmental technology support has given you a Customer ID with Checksum, enter it here. Otherwise, use the Token in your Order Details. Navigate to Your Account/Orders within the   to locate it. 
   
   sudo /opt/CrowdStrike/falconctl -s --cid=<CID>
   
4. Press Enter.
5. In the terminal, enter the appropriate command to start the sensor:
   
   SysVinit:
   sudo service falcon-sensor start
   
   Systemd:
   sudo systemctl start falcon-sensor

Verify CrowdStrike Is Running

1. Open the Falcon application.
2. You should see a window with three green checkmarks next to:
   • Sensor is registered
   • Sensor is operational
   • Sensor is cloud connected

1. The Falcon icon shows the status in the taskbar notification area (system tray):
   
   •   Falcon icon with a green check and shield - Falcon sensor is running
   •   Gray Falcon icon - Falcon sensor is NOT running
   •   X - internal sensor error
2. Click the Falcon icon in the notification area to update the status and see detailed information. Driver and Server status should be checked. Cloud connection should be connected.

1. In the terminal, enter the appropriate command to verify the sensor has been installed:
   
   ps -e | grep falcon-sensor
2. Press Enter.
3. If you do not see output similar to the following, contact your departmental IT administrator, DSP consultant, or the Computing Services Help Center for assistance.
   
   [root@centos6-installtest ~]$ ps -e | grep falcon-sensor
905 ? 00:00:02 falcon-sensor

Important

The Falcon Sensor for Linux is validated for specific Linux kernel versions. If the running Linux kernel is not on the current validation list, the sensor will have reduced or no functionality. We recommend you delay installing new Linux kernels for two weeks after your distro's release date to allow time for CrowdStrike's validation process and ensure the sensor remains fully effective.