Skip to content
RevoDocs

Install on macOS

Install RevoAgent on Macs with Apple silicon or Intel processors, from Terminal or your RMM or MDM.

Updated

On this page

The macOS agent (0.7.0) runs on Apple silicon and Intel Macs on the current macOS release and the two before it.

Install

  1. In the customer's workspace, open Customer settings → Install agent and choose Create installer link.
  2. Copy the macOS command and run it in Terminal, or as root from your RMM or MDM:
Shell
curl -fsSL https://<your Revo address>/i/<link key>.sh | sudo sh

It's the same command as for Linux: on a Mac it runs the link's macOS installer, which picks the build for the Mac's processor, checks it against the published release digest, installs it, enrolls the Mac and starts the com.revotg.agent LaunchDaemon. The enrollment token reaches the installer on its standard input, never on a command line.

To switch features off on this Mac at install time, add the options after sh -s --:

Shell
curl -fsSL https://<your Revo address>/i/<link key>.sh | sudo sh -s -- --disable-patching --disable-reboot

Installers created before 2026-10-28 show the older curl … '<link>/macos.sh' | sudo bash command, which still works.

The options are --disable-patching, --disable-reboot and --disable-remote-uninstall. See Local controls.

Gatekeeper and signing

The agent binary isn't signed with an Apple Developer ID or notarized. That's expected: it's installed from a root shell and started by launchd, so Gatekeeper's quarantine never applies. Don't download the binary in a browser and open it from Finder.

Where it installs

WhatWhere
Program, identity and config.toml/Library/Application Support/Revo/Agent
ServiceLaunchDaemon /Library/LaunchDaemons/com.revotg.agent.plist
Log/Library/Logs/Revo/agent.log

What it reports

  • Installed applications (from /Applications and similar locations). The serial number is never collected.
  • Six checks: FileVault, the application firewall, Gatekeeper, System Integrity Protection, pending updates and automatic update settings.
  • Its softwareupdate patch inventory.

Updates on macOS

With patch management on, Revo installs the items softwareupdate lists: security responses, Safari and macOS point releases. It never installs new major macOS versions; leave those to the Mac's user or your MDM. On Apple silicon, some macOS updates need the Mac's signed-in owner or an MDM to approve them. See macOS and Linux updates.

Check it worked

The Mac appears in Devices within a minute. On the Mac:

Shell
sudo launchctl print system/com.revotg.agent | head

If it doesn't appear, see Troubleshooting devices.