Skip to main content
Matrix42 Self-Service Help Center

UEM Agent II: macOS

Distribute UEM Agent

With the power of Matrix42 Unified Endpoint Management, you can benefit from combining the capabilities of a modern enterprise mobility management solution with all the capabilities that the classic lifecycle management provides. With a hybrid management it is very easy to provide a streamlined onboarding process for new employees on macOS or Windows 10/11 platform devices, where devices will be shipped to employees to utilize an Out-of-the-box enrollment with the Apple Device Enrollment Program or Windows Autopilot to a modern management layer (Silverback) and the fulfillment of classic management scenarios (Empirum), like installations of legacy applications. This ensures an easy starting process for new employees which is very easy to handle, fast and quite unique in the Secure Unified Endpoint Management market. In such scenarios the device is set up and configured with Silverback, which will be leveraged to install the Empirum Agent on top. The following guide describes the steps and configuration to achieve co-managed devices with Matrix42 Secure Unified Endpoint Management. 

With the Unified User Experience, the following steps can be easily performed  as described here in an automated way.

Requirements

  • The UEM Agent must be able to connect to the Empirum (depot) server. Usually this will be done via https
  • Empirum should be prepared for automatic assignments in order to automate the process of assigning and activating computers
  • On Apple Silicon devices in combination with macOS components until 2107, ensure to have Rosetta 2 activated.  Open Terminal and run /usr/sbin/softwareupdate --install-rosetta --agree-to-license to install Rosetta 2 before deploying the Empirum Agent. For newer macOS components version, the Rosetta 2 installation is not required.

Download UEM Agent

  • Open Matrix42 Marketplace and perform a login
  • Navigate to Empirum
  • Navigate to Add-Ons 
  • Navigate to macOS Components
  • Click Details and Downloads
  • Download the latest macOS Components
  • Unzip the package
  • Open the unzipped folder and navigate to 
    • Mac EmpirumAgent for Silverback
  • Here you should see now 2 files
  • Proceed with Silverback Management Console

Integrate UEM Agent

Add to App Portal

  • Open Silverback Management Console
  • Login with Administrative credentials
  • Navigate to App Portal
  • Select macOS
  • Press New Application
  • Enter as Name e.g. Matrix42 UEM Agent 
  • Enter a description
  • Under PKG File select Choose File 
    • Navigate to your unzipped macOS Components folder 
    • Navigate to Mac EmpirumAgent for Silverback
    • Double click the EmpirumAgent.pkg file
  • Under PLIST File select Choose File 
    • Navigate to your unzipped macOS Components folder 
    • Navigate to Mac EmpirumAgent for Silverback
    • Double click the manifest.plist fiile
  • Press Save
  • Wait until the upload process has been finished
  • Confirm with OK

Create a Tag

  • Navigate to Tags
  • Click New Tag
  • Enter a name, e.g. Matrix42 UEM Agent
  • Under Enabled Features enable Apps
  • Under Device Types enable macOS
  • Enable Auto Population (optional)

With activation of the Auto Population checkbox, all macOS devices will receive this tag when they check-in . You can use also a more granular configuration for Auto Population for the tag assignment. Please note that it is recommend first to assign the Tag later manually to some test devices, before starting an automatic roll-out with this tag.  

  • Press Save

Add Matrix42 UEM Agent

  • Navigate to Apps
  • Select Assign More Apps
  • Select Matrix42 UEM Agent
  • Click Add Select Apps
  • Click the Manage Config button
  • Enter your adjusted installation parameters
    • e.g. with the sample Managed Config parameters:
<dict>
     <key>CommonParameters</key>
     <dict>
          <key>Servername</key>
          <string>empirum.imagoverum.com</string>
          <key>Username</key>
          <string>.\DepotUser</string>
          <key>Password</key>
          <string>C1125447A6305BB8259495B37C348B3464D31A5AB7B888387E8021388FD1B1FF335CB5094D9D9444B3D2CBB27AB6EE9242A56121F8CCC0B2</string>
     </dict>
     <key>Protocols</key>
     <array>
          <dict>
               <key>Type</key>
               <string>https</string>
               <key>Servername</key>
               <string>empirum.imagoverum.com</string>
               <key>Port</key>
               <string>443</string>
          </dict>
     </array>
</dict>

The password is encrypted with the Empirum tool Empcrypt. Empirum cloud customers can refer as well to the following documentation.

  • Press Save
  • Confirm with Ok
  • Press Save & Close

Assign Tag (optional) 

If you have not enabled the Auto Population for the Tag, navigate now to Definition, press Associated Devices and assign devices by selecting the Attach More device option. As an alternative navigate to the Devices Tab, locate your device and use the quick action to assign the Tag manually.

Initialize and Review

Perform a device sync

  • Navigate to Devices
  • Select your device and click on it
  • Press Refresh 
  • After the Device sync the device should have the Tag assigned
  • Review the Tag Assignment in Silverback (optional)

Review Pending Commands

  • Click Actions
  • Select Pending Commands
  • You should see here 2 Commands:
    • InstallEnterpriseApplications indicates that an Enterprise Application command has been sent to the device
    • InstallMacOsAppConfigProfile indicates that an correponding application configuration has been sent to the device

Click the refresh icon in the table to see how the status for all pending commands will change, e.g. from Pending to Acknowledged

Head over now to your managed macOS device

Review Agent Installation 

  • The agent will now be transferred to the device. It may take some time. Please be patient 
  • Open your System Preferences
  • Navigate to Profiles
  • In the left panel you should see now a new Profile, Silverback Managed Preferences
  • Open Finder
  • Select Go in the Status Bar
  • Select Go to Folder
  • Enter /Library/Application Support/matrix42/
  • Click Go
  • Here you should see two Folders named as Empirum and EmpirumAgent
  • After a couple of time the Empirum Agent icon should appear within the Status Bar in the upper right

A reboot might be required on the target machine

  • Press alt/option on your keyboard and perform a left click on the Empirum Agent
  • Select General Information
  • Here you should see your connection information

Additional Information 

  • If you have problems connecting to the Empirum server after installation, which is indicated by a gray agent icon, you can right-click on the agent icon and select Save support information. This will create a *.zip file on the desktop that you can send to the support team. The important information can be found in the *.zip file under Library/Logs/matrix42.
  • Alternatively, you can open the console via the Launchpad and review the com.matrix42.EmpirumAgent.log under Log Reports for an initial overview. 
  • Review how to uninstall the UEM Agent: Uninstall UEM Agent on macOS devices
  • Was this article helpful?