Skip to main content

Deploy with Iru

Use Iru to deploy the Willow Scan Agent package and managed configuration profile to macOS devices.

Prerequisites​

  • Iru admin access with permission to manage apps, profiles, device groups, and assignment blueprints.
  • A pilot assignment blueprint or device group.
  • The macOS .pkg installer and .mobileconfig profile from the Willow AI Discovery setup flow.

Minimum requirements​

ComponentMinimum requirement
Iru softwareIru with custom app/package deployment and custom configuration profile deployment for managed Mac devices. Public Iru/Kandji docs describe deploying custom apps to enrolled Mac devices and support .PKG, .ZIP, and .DMG installers in Custom Apps Overview.
Target OSManaged macOS devices. This guide does not apply to Windows or Linux devices.
Willow filesThe macOS .pkg installer and .mobileconfig profile from Willow.
Device stateTarget Macs must be enrolled in Iru and assigned to the blueprint or device group used for the rollout.

Willow does not publish a separate minimum Iru version. Use a currently supported Iru release that provides the features listed above.

Expected outcome​

Target Macs receive the Willow managed configuration profile, install the Scan Agent package, and appear in AI Discovery after the next scan interval.

For browser-based AI visibility, deploy Willow Guard through a managed Chrome policy separately from the Scan Agent package. See Deploy Willow Guard Browser Extension.

Add the configuration profile​

  1. In Iru, create a custom configuration profile for macOS.
  2. Upload the Willow .mobileconfig file.
  3. Name the profile clearly, such as Willow Scan Agent Configuration.
  4. Assign the profile to your pilot blueprint or device group.
  5. Save the profile.

Add the package as a custom app​

  1. In Iru, create a custom app or package item for macOS.
  2. Upload the Willow .pkg installer.
  3. Name the app clearly, such as Willow Scan Agent.
  4. Assign it to the same pilot blueprint or device group as the configuration profile.
  5. Save and deploy the app.

Deploy the configuration profile before or with the package. If the package installs before the profile reaches the Mac, restart the agent after the profile arrives.

Verify on a Mac​

Run these commands on a scoped test Mac:

sudo profiles list -type configuration | grep -i willow
sudo launchctl print system/com.mcp-s-scan.agent
tail -n 50 /var/log/mcp-s-scan/agent-error.log

Then open AI Discovery in Willow and confirm the device appears with a recent last scan time.

Expand rollout​

After the pilot group reports successfully:

  1. Expand the profile assignment.
  2. Expand the package assignment.
  3. Monitor Iru deployment status and Willow AI Discovery device counts.

Roll back​

To remove the agent from a Mac, deploy this command through Iru:

sudo /usr/local/bin/mcp-s-scan-uninstall.sh

Remove the configuration profile from the same scope if the device should stop reporting to Willow.

On this page