Endpoint Agent installation SOP

The installation SOP is the operator runbook for rolling the Endpoint Agent out to macOS and Windows devices. Work through the steps in order: each one gates the next. At the top of each step, pick your platform and your tenant environment, and the commands and hostnames on the page change to match.

Installation SOPEndpoint AgentOpen full page

1. 1Prerequisites
2. 2Prerequisites Validation
3. 3Manual Installation
4. 4Validate Manual Install
5. 5Installing using MDM
6. 6Enable PAC Routing
7. 7Verify MDM Install
8. 8Troubleshooting

Synced from quilrai/installdocs at 2ae2f9e on every docs build.

What each step covers

Step	Use it to
Prerequisites	Check the tenant environment, supported OS versions, MDM admin access, the network allow-list and the install bundle.
Prerequisites validation	Confirm every QuilrAI host is reachable on TCP 443 and bypassed from SSL inspection, with the connectivity check scripts.
Manual installation and validation	Install on one device from the command line, then prove it works with a live interception test.
Installing using MDM	Roll out to the fleet with Microsoft Intune, Jamf Pro, Kandji or ManageEngine Endpoint Central.
Enable PAC routing	Point devices at the PAC file and confirm traffic takes the route.
Verify MDM install	Confirm the fleet rollout on the devices and in the console.
Troubleshooting	Triage failures, find the logs and collect the diagnostic bundle for QuilrAI support.

note

Always deploy trust before traffic: the CA certificates first, then the configuration profiles, then the agent package. Confirm tenant-specific values (tenant ID, environment hosts, MSI product code) with QuilrAI support before you roll out.

Related pages

• Requirements: OS versions, privileges, network destinations and platform approvals.
• Deployment and status: the silent install reference (tenant binding, detection rules, uninstall) and coverage tracking in Users › Endpoint deployment.
• Agent kill switch: stop the agent on one device or across the tenant.