Skip to main content
Matrix42 Self-Service Help Center

UEM Agent II: macOS

Distribute Empirum Agent on Modern Devices

With the power of Matrix42 Unified Endpoint Management, you can benefit from combining the capabilities of a modern enterprise mobility management solution with all the capabilities that the classic lifecycle management provides. With a hybrid management it is very easy to provide a streamlined onboarding process for new employees on macOS or Windows 10/11 platform devices, where devices will be shipped to employees to utilize an Out-of-the-box enrollment with the Apple Device Enrollment Program or Windows Autopilot to a modern management layer (Silverback) and the fulfillment of classic management scenarios (Empirum), like installations of legacy applications. This ensures an easy starting process for new employees which is very easy to handle, fast and quite unique in the Secure Unified Endpoint Management market. In such scenarios the device is set up and configured with Silverback, which will be leveraged to install the Empirum Agent on top. The following guide describes the steps and configuration to achieve co-managed devices with Matrix42 Secure Unified Endpoint Management. 


  • The UEM Agent must be able to connect to the Empirum (depot) server. Usually this will be done via https
  • Mac Empirum Agent for Silverback minimum version 2102.0
  • Silverback minimum version 20.0 Update 2
  • On Apple Silicon devices in combination with macOS components until 2107, ensure to have Rosetta 2 activated.  Open Terminal and run /usr/sbin/softwareupdate --install-rosetta --agree-to-license to install Rosetta 2 before deploying the Empirum Agent. For newer macOS components version, the Rosetta 2 installation is not required.

Empirum Management Console 

  • Open Empirum Management Console 
    • e.g. Matrix42 Management Console (EMC)
    • or Empirum Web Console  (EWC)
  • Login with your Administrative credentials

Create Assignment Groups

  • Right click Assignment Groups
  • Select New Group
  • Enter a name, e.g. Matrix42 Co-Management
  • Enter a description
  • Click Finish 

Assign Agent Template

  • Assign an Agent Template to the previously created Assignment Group
  • Assign additional packages (optional)

Create Filter 

  • Right Click Computers
  • Select Filter 
    • Add a Filter Name
    • Add a description
    • Under assigned select not assigned 
    • Select as Table Computer 
    • Select Parameters Computer Name 
    • Select as Critical LIKE 
    • Select as Value Desktop-X
    • "Computer name like %"
  • Press Ok to Save

You can also use other filters with naming rules for assignment to different groups.

Create Filter Actions 

  • Perform a right click on your previously created filter 
  • Select Filter Actions
  • Click + New
    • Add a Name
    • Add a Description
    • Press Next
    • Select Assign non-assigned computers to an assignment group 
    • Enable Only for new objects
    • Click Next 
    • Select your previously created assignment group 
    • Enable Activate
    • Click Next
    • Click Next
    • Select Recurring and define a daily frequency 
    • Click OK
    • Click Finish 
    • Close with OK 

Download UEM Agent

  • Open Matrix42 Marketplace and perform a login
  • Navigate to Empirum
  • Navigate to Add-Ons 
  • Navigate to macOS Components
  • Click Details and Downloads
  • Download the latest macOS Components
  • Unzip the package
  • Open the unzipped folder and navigate to 
    • Mac EmpirumAgent for Silverback
  • Here you should see now 2 files
  • Proceed with Silverback Management Console

Silverback Management Console

Add to App Portal

  • Open Silverback Management Console
  • Login with Administrative credentials
  • Navigate to App Portal
  • Select macOS
  • Press New Application
  • Enter as Name e.g. Matrix42 UEM Agent 
  • Enter a description
  • Under PKG File select Choose File 
    • Navigate to your unzipped macOS Components folder 
    • Navigate to Mac EmpirumAgent for Silverback
    • Double click the EmpirumAgent.pkg file
  • Under PLIST File select Choose File 
    • Navigate to your unzipped macOS Components folder 
    • Navigate to Mac EmpirumAgent for Silverback
    • Double click the manifest.plist fiile
  • Press Save
  • Wait until the upload process has been finished
  • Confirm with OK

Create a Tag

  • Navigate to Tags
  • Click New Tag
  • Enter a name, e.g. Matrix42 UEM Agent
  • Under Enabled Features enable Apps
  • Under Device Types enable macOS
  • Enable Auto Population (optional)

With activation of the Auto Population checkbox, all macOS devices will receive this tag when they check-in . You can use also a more granular configuration for Auto Population for the tag assignment. Please note that it is recommend first to assign the Tag later manually to some test devices, before starting an automatic roll-out with this tag.  

  • Press Save

Add Matrix42 UEM Agent

  • Navigate to Apps
  • Select Assign More Apps
  • Select Matrix42 UEM Agent
  • Click Add Select Apps
  • Click the Manage Config button
  • Enter your adjusted installation parameters
    • e.g. with the sample Managed Config parameters:

The password is encrypted with the Empirum tool Empcrypt

  • Press Save
  • Confirm with Ok
  • Press Save & Close

Assign Tag (optional) 

If you have not enabled the Auto Population for the Tag, navigate now to Definition, press Associated Devices and assign devices by selecting the Attach More device option. As an alternative navigate to the Devices Tab, locate your device and use the quick action to assign the Tag manually.

Perform a device sync

  • Navigate to Devices
  • Select your device and click on it
  • Press Refresh 
  • After the Device sync the device should have the Tag assigned
  • Review the Tag Assignment in Silverback (optional)

Review Pending Commands

  • Click Actions
  • Select Pending Commands
  • You should see here 2 Commands:
    • InstallEnterpriseApplications indicates that an Enterprise Application command has been sent to the device
    • InstallMacOsAppConfigProfile indicates that an correponding application configuration has been sent to the device

Click the refresh icon in the table to see how the status for all pending commands will change, e.g. from Pending to Acknowledged

macOS Device

Head over now to your managed macOS device

Agent Installation 

  • The agent will now be transferred to the device. It may take some time. Please be patient 
  • Open your System Preferences
  • Navigate to Profiles
  • In the left panel you should see now a new Profile, Silverback Managed Preferences
  • Open Finder
  • Select Go in the Status Bar
  • Select Go to Folder
  • Enter /Library/Application Support/matrix42/
  • Click Go
  • Here you should see two Folders named as Empirum and EmpirumAgent
  • After a couple of time the Empirum Agent icon should appear within the Status Bar in the upper right

A reboot might be required on the target machine

  • Press alt/option on your keyboard and perform a left click on the Empirum Agent
  • Select General Information
  • Here you should see your connection information

Additional Information 

  • Was this article helpful?