Skip to main content

Deploy with Mosyle

Use Mosyle to deploy the Willow Scan Agent package and managed configuration profile to macOS devices.

Prerequisites​

  • Mosyle admin access with permission to manage apps, profiles, device groups, and assignments.
  • A pilot group of managed Mac devices.
  • The macOS .pkg installer and .mobileconfig profile from the Willow AI Discovery setup flow.

Minimum requirements​

ComponentMinimum requirement
Mosyle softwareMosyle with macOS app installation and patching features. Mosyle documents app install and patch management for macOS in macOS App Install & Patching.
Target OSManaged macOS devices. This guide does not apply to Windows or Linux devices.
Willow filesThe macOS .pkg installer and .mobileconfig profile from Willow.
Device stateTarget Macs must be enrolled in Mosyle and assigned to the group or scope used for rollout.

Willow does not publish a separate minimum Mosyle version. Use a currently supported Mosyle release that can deploy macOS packages and custom configuration profiles.

Expected outcome​

Target Macs receive the Willow managed configuration profile, install the Scan Agent package, and appear in AI Discovery after the next scan interval.

For browser-based AI visibility, deploy Willow Guard through a managed Chrome policy separately from the Scan Agent package. See Deploy Willow Guard Browser Extension.

Add the configuration profile​

  1. In Mosyle, create or upload a custom macOS configuration profile.
  2. Upload the Willow .mobileconfig file.
  3. Name the profile clearly, such as Willow Scan Agent Configuration.
  4. Assign the profile to your pilot Mac group.
  5. Save and publish the profile.

Add the package​

  1. In Mosyle, create a macOS app or package deployment item.
  2. Upload the Willow .pkg installer.
  3. Name the item clearly, such as Willow Scan Agent.
  4. Assign it to the same pilot group as the configuration profile.
  5. Save and deploy the package.

Deploy the configuration profile before or with the package. If the package installs before the profile reaches the Mac, restart the agent after the profile arrives.

Verify on a Mac​

Run these commands on a scoped test Mac:

sudo profiles list -type configuration | grep -i willow
sudo launchctl print system/com.mcp-s-scan.agent
tail -n 50 /var/log/mcp-s-scan/agent-error.log

Then open AI Discovery in Willow and confirm the device appears with a recent last scan time.

Expand rollout​

After the pilot group reports successfully:

  1. Expand the configuration profile assignment.
  2. Expand the package assignment.
  3. Monitor Mosyle deployment status and Willow AI Discovery device counts.

Roll back​

To remove the agent from a Mac, deploy this command through Mosyle:

sudo /usr/local/bin/mcp-s-scan-uninstall.sh

Remove the configuration profile from the same scope if the device should stop reporting to Willow.

On this page