[[ThreatLocker]] is a [[zero-trust]] endpoint security tool. This is a guide on deploying the MacOS agent using [[Addigy]]. > [!Note] > I followed the [ThreatLocker Documentation](https://threatlocker.kb.help/deploying-threatlocker-to-mac-with-addigy-mdm/) for the initial setup. The instructions below are how to deploy ThreatLocker for a specific device or client. # New Client Setup ## MAC Agent Computer Group Creation > [!Note] > The MAC Agent currently does NOT support Global groups. MAC computers will need to be installed into a separate computer group. To create a computer group for your MAC(s), in the ThreatLocker Portal, navigate to the Computers page and switch to the Computer Groups tab. Select the 'New Computer Group' button at the top of the page. ![[Pasted image 20250217102150.png]] Input a name for the new group. In the Computer Group Type section, select 'MAC' from the dropdown menu. ![[Pasted image 20250217102204.png]]The remainder of the settings can be left at their default selections. Click the 'Save' button at the top left corner. ## MAC Agent Group Key Location Before installation, you will need to retrieve your Group Key from the ThreatLocker Portal. > [!Note] > This is **NOT** the same as the Unique Identifier that is found on the Computers Page > Install New Computers window.    Navigate to the 'Computers Page' and switch to the 'Computer Groups Tab'. Click the group you'd like to install your Mac devices into.   ![[Pasted image 20250217102247.png]] The Group Key will be shown as the Install Key in the 'Edit Computer Group' popup window: ![[Pasted image 20250217102303.png]] Take note of your Group Key (InstallKey), as you may need it during the installation of the Mac agent. The Group Key is also included in the name of the PKG file. # Client-wide Deployment 1. Open the client policy where you would like to deploy ThreatLocker and copy the Policy ID.![[Pasted image 20250217103039.png]] 2. Open Addigy Policies and select "ThreatLocker Deployment".![[Pasted image 20250217102423.png]] 3. Open the auto-assignment filters.![[Pasted image 20250217103431.png]] 4. Underneath the "OR" click "Add Filter" and add two filters. 1. "Device Model Name" contains "Mac" 2. "Location (Policy ID)" = enter the policy ID you copied in step 1. ![[Pasted image 20250217102955.png]] 5. Click "Save auto-assignment". 6. If you need to deploy ThreatLocker quickly you can click "Deploy Now" and monitor the status on the ThreatLocker Deployment Policy.![[Pasted image 20250217103740.png]]