CyberGuard
by Inside Technologies Srl

Other Deployment Tools

The agent does not depend on Microsoft Intune. Any tool that can copy files to a computer and run a command with administrator rights can install it: the steps are always the same.

Windows

Copy these three files into the same local folder on the computer:

  • CyberGuardDIMAgent.exe and Install-CyberGuardDimAgent.ps1, from the Windows package (My Tenant › Edit › Agent › Download Windows agent);
  • your config.dat (see Enrollment campaigns and config.dat).

Then run, as Local System or as an administrator:

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\Install-CyberGuardDimAgent.ps1 -AgentExePath .\CyberGuardDIMAgent.exe -ConfigDatPath .\config.dat

The installer checks the signature of the agent, installs the CyberGuardDimAgent service with automatic startup, copies config.dat to a protected folder and starts the service. It fails if the service does not stay running, and writes the details to C:\ProgramData\Inside Technologies\CyberGuard DIM Agent\logs\install.log.

The same command updates an existing installation. To check whether a computer already has the version you are deploying, read the InstalledVersion value under HKEY_LOCAL_MACHINE\SOFTWARE\Inside Technologies\CyberGuard DIM Agent.

ManageEngine Endpoint Central

Create a software package with the three files, use the command above as the installation command and run it once per computer, with system rights. Use the InstalledVersion registry value as the success criterion.

Group Policy or RMM

Copy the three files to a local folder on the computer, for example with a Group Policy file preference, then run the command through a computer startup script, a scheduled task or an RMM job.

Do not run the installer from a network share and do not leave config.dat on a share: the installer copies it into its own protected folder.

Manual installation

  1. Copy the three files to a local folder, for example C:\Temp\CyberGuardDIM.

  2. Open PowerShell as Administrator in that folder.

  3. Run:

    .\Install-CyberGuardDimAgent.ps1 -AgentExePath .\CyberGuardDIMAgent.exe -ConfigDatPath .\config.dat

  4. Check that the service is running:

    Get-Service CyberGuardDimAgent

The scripts are signed by Inside Technologies. With the RemoteSigned or AllSigned execution policy you do not need to change it; only if the policy is Restricted, first run Set-ExecutionPolicy -Scope Process Bypass.

Removing the agent

Run, as an administrator, in the package folder:

.\Uninstall-CyberGuardDimAgent.ps1

Add -KeepData to remove the service but keep config.dat and the local state.

macOS

With an MDM other than Intune, deploy the .pkg and the configuration script as described in macOS with Microsoft Intune: the package must run as root and the script needs the address of your config.dat.

To install the agent on a single Mac by hand:

  1. Install Rosetta 2, which the current package still needs:

    sudo softwareupdate --install-rosetta --agree-to-license

  2. Install the package:

    sudo installer -pkg CyberGuard-DIM-Agent-osx-arm64.pkg -target /

  3. Open Install-CyberGuardDIMAgent-Config.sh in a text editor and set CONFIG_SOURCE to the full path of config.dat on the Mac, for example /Users/admin/Desktop/config.dat, or to an https:// address.

  4. Run the script:

    sudo sh ./Install-CyberGuardDIMAgent-Config.sh

  5. Check that the agent is running:

    sudo launchctl print system/com.insidetechnologies.cyberguard.dim-agent