> For the complete documentation index, see [llms.txt](https://docs.cybaops.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cybaops.com/getting-started/onboarding/agent-deployment/qualys-intune-macos.md).

# Qualys - Intune MacOS

*<mark style="color:$info;">Intune deployment for macOS</mark>*

This guide walks you through deploying the Qualys Cloud Agent to Macs through
\
Microsoft Intune. You’ll upload the .pkg installer as a line-of-business app, then push a
\
small shell script to activate the agent. The setup takes about 10–15 minutes the first
\
time.

### <mark style="color:$primary;">Before you Start</mark>

Make sure you have the following ready:

* Microsoft Intune admin access (Intune Administrator or Application Administrator
  \
  role).
* Macs already enrolled in Intune (Apple Push Notification certificate + MDM
  \
  enrolment profile in place).
* Access to CybaOps so you can open Asset Manager.
* A test Mac you can use to verify the deployment.

<mark style="color:$primary;">Step 1 — Download the Package and Copy the Activation
&#x20;Command</mark>
--------------------

1. Sign in to CybaOps and open Asset Manager.
2. Click the Deploy Agent button in the top-right corner.
3. In the Deploy Agent window, set Select Agent to Qualys and Select Operating System to Mac.
4. Click Download Qualys and save QualysCloudAgent.pkg locally.
5. Leave the Deploy Agent window open — it shows the activation command with your CustomerId and ActivationId pre-filled. You’ll embed these values in a shell
   \
   script in Step 4.

{% hint style="warning" %}
**Keep this window open: The Deploy Agent window is the only place you can copy the**
\
**activation command with the correct CustomerId and ActivationId for your tenant.**
{% endhint %}

## <mark style="color:$primary;">Step 2 — Add the .pkg as a line-of-business app in Intune</mark>

1. Sign in to the Microsoft Intune admin center at <https://intune.microsoft.com>.
2. Go to Apps → All apps → Add.
3. In the Select app type pane, under Other, choose Line-of-business app and click Select.
4. Click Select app package file, upload QualysCloudAgent.pkg, and click OK.
5. On the App information page, fill in the app details (Name: Qualys Cloud Agent, Publisher: Qualys, etc.) and click Next.

## <mark style="color:$primary;">Step 3 — Assign the app and Create</mark>

1. On the Assignments page, under Required, click Add group and select the Entra ID group(s) containing your enrolled Macs.
2. Click Select, then Next.
3. Review the configuration and click Create.

Intune will start pushing the .pkg to your assigned Macs. The installer drops the agent
\
into /Applications/QualysCloudAgent.app, but it won’t register with the platform until
\
it’s activated — that’s the job of the shell script in the next step.

## <mark style="color:$primary;">Step 4 — Create the Activation Shell Script</mark>

In a text editor, create a file called activate-qualys-agent.sh with the contents below.
\
Replace YOUR-ACTIVATION-CODE with the value shown in Deploy Agent (and update
\
CustomerId/ServerUri if your Deploy Agent window shows different values).

{% code overflow="wrap" %}

```
#!/bin/zsh
# Activate the Qualys Cloud Agent on macOS
# Replace YOUR-ACTIVATION-CODE with the value shown in CybaOps Deploy Agent
/Applications/QualysCloudAgent.app/Contents/MacOS/qualys-cloud-agent.sh \
 CustomerId=4ced42b6-21b2-e6d5-80a3-bf1f6d2597f6 \
 ActivationId=YOUR-ACTIVATION-CODE \
 ServerUri=https://qagpublic.qg1.apps.qualys.co.uk/CloudAgent/
exit 0
```

{% endcode %}

{% hint style="info" %}
**Tip: Always copy the activation values directly from Deploy Agent rather than typing**
\
**them — that way your activation code is guaranteed to be correct.**
{% endhint %}

## <mark style="color:$primary;">Step 5 — Deploy the Activation Script via Intune</mark>

1. In the Intune admin center, go to Devices → Scripts and remediations → macOS → Platform scripts → Add.
2. Give the script a name (e.g. Qualys Cloud Agent activation) and click Next.
3. Upload activate-qualys-agent.sh.
4. Set Run script as signed-in user to No (the script must run as root).
5. Set Hide script notifications on devices to Yes.
6. Set Script frequency to Not configured (run once).
7. Set Max number of times to retry if script fails to 3.
8. Click Next.
9. Under Assignments, select the same Entra ID group as the LOB app. 10.Click Next, review, and click Add.

### <mark style="color:$primary;">What the Parameters Mean</mark>

* **CustomerId** — identifies your Qualys subscription. This is the same for every device
  \
  in your organisation.
* **ActivationId** — the unique activation key Qualys uses to register the device.
* **ServerUri** — the Qualys platform the agent reports into (UK platform in this case).

## <mark style="color:$primary;">Step 6 — Confirm it Deployed</mark>

Wait a few minutes for Macs to check in with Intune. Once the .pkg has installed and the
\
script has run successfully, the Macs will appear in CybaOps Asset Manager. You can
\
monitor progress in:

* Intune admin center → Apps → Qualys Cloud Agent → Device install status
* Intune admin center → Devices → Scripts and remediations → your script →
  \
  Device status

### <mark style="color:$primary;">Troubleshooting</mark>

* **App reports “Install failed” in Intune** — Confirm the Mac is enrolled in Intune with
  \
  an MDM profile and is online. Re-deploy from the Device install status page.
* **Package installed but device not in Asset Manager** — The activation script hasn’t
  \
  run yet or has failed. Check Scripts and remediations → Device status for the
  \
  error.
* **Activation rejected / agent doesn’t appear** — Double-check the CustomerId and
  \
  ActivationId values in the script. Copy and paste from Deploy Agent rather than
  \
  typing.
* **Connection error** — Confirm the Mac has internet access and that no firewall is
  \
  blocking outbound HTTPS to qagpublic.qg1.apps.qualys.co.uk.

### <mark style="color:$primary;">Need Help?</mark>

If the deployment still won’t complete, contact our support team and include the Intune
\
deployment status and any device install log — that helps us identify the issue quickly.

Please contact <support@cybaops.help> for assistance.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cybaops.com/getting-started/onboarding/agent-deployment/qualys-intune-macos.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.