Skip to content

Products

Compliance Officer Service Expert-led compliance, end to end Compliance Portal Share security documents securely Open-source platform Deploy Probo on your own infrastructure

Resources

Probo stories How teams get compliant with Probo Blog Ideas and guidance from the Probo team Guides & tools Practical compliance guides and free tools Love from Customers What customers say about working with Probo Changelog Latest product updates Download Get the Probo Agent

Company

About The people and vision powering Probo Careers Join the team building Probo Brand assets Official logos and visual resources Security Review our security and compliance posture

Explore

Docs Documentation for Probo GitHub Explore our open-source compliance tools

Desktop install (macOS / Windows)

The recommended way to set up Probo Agent on a Mac or Windows computer is:

  1. Install the signed package (.pkg on macOS, .msi on Windows)
  2. Enroll the device from the Probo console in your browser

You do not need the command line for a normal install. After the installer finishes, enrollment opens Probo Agent.app (macOS) or the system tray helper (Windows), which completes the link for you.

CLI enrollment exists only as an advanced fallback for administrators. Prefer the installer and Probo console flow below whenever possible.

For Linux, FreeBSD, or headless servers, see Server install.

Make sure you have:

  • Access to the Probo console for your region:
  • The Mac or Windows computer you want to enroll
  • Permission to install software on that computer (you may be asked for an admin password)

Download the installer for your platform from the Download page, or from GitHub Releases under the probo-agent/v* tag.

After the agent is installed, someone with access to the Probo console starts enrollment for your device. In the Probo console, choose your region if prompted, then click enroll. Your browser opens a probo://enroll?... link. Because the installer already registered that link handler, macOS or Windows hands it to Probo Agent, which finishes enrollment without a terminal.

You should see a short confirmation in the tray (or in Probo Agent.app on macOS). The device then appears as enrolled in the Probo console and begins reporting posture checks.

macOS releases ship a universal signed .pkg that works on both Apple silicon and Intel Macs—for example probo-agent_1.2.3_darwin.pkg. Use this package; do not rely on a manual CLI install for day-to-day enrollment.

  1. Download the package

    From the Download page, download the macOS .pkg for the latest Probo Agent release.

  2. Run the installer

    Open the downloaded .pkg and follow the installer screens. Approve the installation if macOS asks for your password.

    The package installs the agent, registers the probo:// URL handler so browser enrollment works, and installs the privileged helper that completes enrollment securely.

  3. Enroll from the Probo console

    Open the enroll page for your region: us.probo.com/enroll or eu.probo.com/enroll.

    Choose your region if prompted, then click enroll.

    Your browser opens a probo://enroll?... link. Allow macOS to open it with Probo Agent.app if prompted. The app (and tray) completes enrollment for you.

  4. Confirm enrollment

    Check Probo Agent.app or the menu bar tray for a successful enrollment message. You can also refresh the device page in the Probo console—it should show the device as enrolled and start showing posture results shortly after.

On macOS, browser enrollment must use the signed app deeplink after the .pkg install.

Windows releases ship a signed .msi installer. Install with this package first, then enroll from the Probo console. That is the supported path for employees and most administrators.

  1. Download the MSI

    From the Download page, download the Windows .msi for the latest Probo Agent release.

  2. Run the installer

    Open the .msi and complete the setup wizard. Approve User Account Control (UAC) if Windows asks for permission.

    The installer places the agent on the machine, starts the tray helper, and enables browser enrollment support.

  3. Enroll from the Probo console

    Open the enroll page for your region: us.probo.com/enroll or eu.probo.com/enroll.

    Choose your region if prompted, then click enroll.

    Your browser opens the enrollment link. The Windows tray helper assists with any elevation needed and finishes enrollment.

  4. Confirm enrollment

    Check the system tray icon for a successful enrollment message. You can also refresh the device page in the Probo console—it should show the device as enrolled and start showing posture results shortly after.

CLI enrollment is not the recommended path on macOS or Windows. Prefer the installer and Probo console enroll steps above. Use the commands below only if browser enrollment is unavailable and an administrator asks you to enroll from a terminal.

To get a one-shot enrollment token, open the Employee Portal, go to the Devices tab, and use the Try creating it manually link. Copy the token from there—do not share it, and do not put it in a URL or chat log.

Then run an elevated install with your region’s server URL and that token:

Terminal window
# macOS
sudo probo-agent install \
--server https://us.probo.com \
--enrollment-token YOUR_TOKEN
Terminal window
# Windows (elevated PowerShell or Command Prompt)
probo-agent.exe install `
--server https://us.probo.com `
--enrollment-token YOUR_TOKEN

Use https://eu.probo.com for EU organizations, or your self-hosted base URL. See Commands for optional flags.

After enrollment (installer path or CLI), you can confirm local state:

Terminal window
probo-agent status

status prints the server URL, device ID, heartbeat/posture/update intervals, and whether auto-update is enabled. In most cases, confirming the device page in the Probo console is enough.

Terminal window
# macOS requires root
sudo probo-agent uninstall
Terminal window
# Windows (elevated), or uninstall via Apps & features / the MSI
probo-agent uninstall

Uninstall stops the service, unenrolls the device, removes tray auto-start where applicable, and deletes local agent state.