Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleCrowdStrike Falcon Install Instruction for Mac
Deck of Cards
idCrowdstrike Install macOS
tabLocationleft
Card
labelmacOS 12 Monterey & macOS 13 Ventura
Note
  • Instructions for macOS 12 Monterey and macOS 13 Ventura are essentially the same. The main difference is how they look
  • The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets
  • If you have Sophos Antivirus on the computer, the CrowdStrike Falcon installer will uninstall it for you
  • If you have Sophos Antivirus on the computer, a restart will be required to finish the Sophos uninstallation process
HTML
<iframe src="https://drive.google.com/file/d/1XXQvT4ZTmgNY6knfcspVWyrCBzpjggbQ/preview" width="640" height="480" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOS 12 and 13no image
2Browse to the location where the file LBL_CS_MacOS_12_13 is downloaded, and right-click on it

3Click  Open
4

Click Open to the popup saying "macOS cannot verify the developer of LBL_CS_MacOS_12_13. Are you sure you want to open it?"

5Click Continue for the "Introduction" and "Read Me" section

6

Leave the default destination as it is and click Continue

Note: if you do not see this screen, continue to the next step.

7Click Install

8Type in your computer password

9Click Install Software
10Click Allow to the popup saying "com.crowdstrike.falcon.app" would like to filter network content"

11A "System Extension Blocked" popup will appear, click Open Security Preferences

12Select Security & Privacy

13Click the Lock icon on the bottom left

14Type in your computer password
15Click Unlock
16Look for "System software from application "Falcon.app" was blocked from loading", and click Allow

17If you are using macOS 13 Ventura, you will see an additional popup saying "Installer would like to modify apps on your mac", click OK

18Installation is done. Click Close 

19

You may select Keep or Move to Trash depending on if you want to keep the CrowdStrike Falcon installer file or delete it

Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

20If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?no image
Card
labelmacOS 11 Big Sur
1Go to software.lbl.gov and download CrowdStrike Falcon Sensor for macOS 11no image
2Browse to the location where the file LBL_CS_MacOS11_vX.X is downloaded, and double-click on it

Image Added

3

It will extract a folder called LBL_CS_MacOS11_vX.X, open it.

Leave this folder open, you will return to it.

Image Added

4Right-click on the GovLagger... file

Image Added

5Select Open With
6Select Installer
7Click Continue for the "Introduction" and "Read Me" section

Image AddedImage Added

8Click Install

Image Added

9Type in your computer password

Image Added

10Click Install Software
11Click Close

Image Added

12Return to the LBL_CS_MacOS11_vX.X folder from step 3 and right-click on the file configuration.command

Image Added

13Select Open With
14Select Terminal
15Click Open to the popup saying "macOS cannot verify the developer of "configuration.command". Are you sure you want to open it?"

Image Added

16

In the terminal window that pops up, type in your computer password and hit enter

Note: no character will appear when you type the password here.

Image Added

17Click Allow to the popup saying "Falcon would like to filter network content"

Image Added

18A "System Extension Blocked" popup will appear, click Open Security Preferences

Image Added

19Select Security & Privacy

Image Added

20Click the Lock icon on the bottom left

Image Added

21Type in your computer password
22Click Unlock
23Look for "System software from application "Falcon" was blocked from loading", and click Allow

Image Added

24

This process may take between 3-8 minutes. Once done you will see it say [Process Completed]

You are done

Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

Image Added

25If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?no image
Under development
Expand
titleCrowdStrike Falcon Install Instruction for Windows
Note

Instructions for Windows 10 and Windows 11 are essentially the same. The main difference is how they look.


HTML
<iframe src="https://drive.google.com/file/d/189nVO4g-Au8jY4sDcfUMDg-GCdFkqseN/preview" width="640" height="480" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for Windowsno image
2Browse to the location where the file LBL_CS_Win_Installer_vX.X is downloaded, and double-click on it

3

You may see the popup"Windows Protected your PC"

Click More info

If not, skip to Step 5

4Click Run anyway

5

The pop-up "Do you want to allow this app to make changes to your device?" will appear

Click Yes

6

A command prompt window will appear stating "This may take several minutes. This window will close when the full process is complete"

This process will take between 4 to 10 minutes


Note

During this process, you may see the following notification in the bottom right corner. You can ignore it.

If you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

7

Once the command prompt window disappears. You are done.

If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?

no image

...