> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Install control agent

> Install idemeum control agent on Windows or macOS.

## Single tenant installation

<Note>
  Here you install control agent and pair it directly with your tenant. If you need to install agent in bulk and pair with multiple tenants (MSP setting) navigate to the next section.
</Note>

<Tabs>
  <Tab title="Windows">
    ### Installation

    <Steps>
      <Step title="Obtain PowerShell script">
        Navigate to your idemeum admin portal, click `Install agent` button, then choose `Control agent` and copy the installation script for Windows.

        <img src="https://mintcdn.com/idemeum/vSqEvZzJ-ehUnd9x/images/CleanShot-2026-05-21-at-15.32.22@2x.png?fit=max&auto=format&n=vSqEvZzJ-ehUnd9x&q=85&s=b34f7980cc279ab58d182b89fefc9ef1" alt="Clean Shot 2026 05 21 At 15 32 22@2x" width="3018" height="2234" data-path="images/CleanShot-2026-05-21-at-15.32.22@2x.png" />
      </Step>

      <Step title="Execute script using PowerShell">
        <Warning>
          Make sure you execute the script with PowerShel Administrator privileges.
        </Warning>

        Open PowerShell and execute the installation script with Administrator privileges. Idemeum will install all required prerequisites before installing the agent. No restart is required after successful installation.
      </Step>
    </Steps>

    ### Command-line arguments

    You can pass additional command-line arguments to the installation script:

    <ParamField path="- restartAfterInstall" type="'true' | 'false'">
      Restart is not required, however you can still trigger the restart after the successful installation by passing `true` as an option.
    </ParamField>

    <ParamField path="- appControlMode" type="'disabled' | 'audit' | 'rules'">
      By default when the agent is installed it operates in `disabled` mode. You can pass the mode which you want to apply at installation time.
    </ParamField>

    <ParamField path="- version" type="'2.5.1'">
      Pass the desktop version that you want to install. By default the latest version will be installed. You need to pass the version with '', for instance '2.5.1'.
    </ParamField>
  </Tab>

  <Tab title="macOS">
    ### Installation

    <Warning>
      When installing macOS control agent you will need to enable security permissions, including Security Extension and Full Disk Access. We recommend deploying production agents with MDM profile to make sure permissions stay enabled after agent updates.
    </Warning>

    <Steps>
      <Step title="Obtain profile and script for macOS">
        Navigate to your idemeum portal, click `Install agent`, choose `Control agent`,  then select `macOS` and download profile and script. 

        <img src="https://mintcdn.com/idemeum/SfvPndq77UnhZAJK/images/CleanShot-2026-05-21-at-15.11.12@2x.png?fit=max&auto=format&n=SfvPndq77UnhZAJK&q=85&s=f7b02d4dea11e93ad418e6709924d801" alt="Clean Shot 2026 05 21 At 15 11 12@2x" width="3018" height="2234" data-path="images/CleanShot-2026-05-21-at-15.11.12@2x.png" />
      </Step>

      <Step title="Deploy profile with your MDM">
        Push the idemeum profile to macOS workstations where idemeum agent will be deployed. Profile automatically enables all required settings.
      </Step>

      <Step title="Deploy bash script">
        Now you can deploy the idemeum script to your workstations using the deployment tool of your choice (MDM, RMM, etc.). No restart is required after installation.
      </Step>
    </Steps>

    ### Command-line arguments

    You can pass additional command-line arguments to the installation script:

    <ParamField path="- appControlMode" type="'disabled' | 'audit' | 'rules'">
      By default when the agent is installed it operates in `disabled` mode. You can pass the mode which you want to apply at installation time.
    </ParamField>
  </Tab>
</Tabs>

## Bulk agent installation

Bulk installation helps MSPs to deploy agent across multiple tenants with a single command. Instead of obtaining installation command from a customer tenant, obtain a command from your MSP tenant instead. Then you can use this command with RMM and leverage RMM variables to dynamically pass the customer name to an installation command. Idemeum control agent will automatically create customer tenants.

<Steps>
  <Step title="Obtain bulk command from MSP parent tenant">
    Login to your MSP tenant, click `Bulk agent install` and then choose `Control agent`. Copy the installation command for Windows or download the profile and installation script for macOS.

    <img src="https://mintcdn.com/idemeum/NvrQTJMQTpeiP7pW/images/CleanShot-2026-05-21-at-15.17.46@2x.png?fit=max&auto=format&n=NvrQTJMQTpeiP7pW&q=85&s=6d51396f7b7dde7ebf8c97fe2850f296" alt="Clean Shot 2026 05 21 At 15 17 46@2x" width="3018" height="2234" data-path="images/CleanShot-2026-05-21-at-15.17.46@2x.png" />
  </Step>

  <Step title="Store the command in your RMM">
    Store the bulk installation command in your RMM. Make sure you leverage proper customer name variable and pass it to the installation script `-customerName` input variable.
  </Step>

  <Step title="Explore integration guides">
    Check our [integration](/integrations) page to explore the examples of how to deploy idemeum agent with various RMMs.
  </Step>
</Steps>