Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:
Individual Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can EDIT the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can ADMINISTER the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 

Versions Compared

Old Version 141

changes.mady.by.user Tap L

Saved on

compared with

New Version Current

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • A guide on how to install or uninstall CrowdStrike Falcon from Berkeley Lab computers
  • The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon chipsets
  • The install instructions for Windows also apply to CrowdStrike For Home

Resolution:

Warning

IMPORTANT:

  • Be sure to select the correct instructions for the operating system you are using
  • It is highly recommended to read the instructions before installing CrowdStrike Falcon

If you have Sophos Antivirus:

  • If you have Sophos Antivirus on the computer, the CrowdStrike Falcon installer will uninstall it for you.
  • If you have Sophos Antivirus on the computer, a restart will be required to finish the Sophos uninstallation process.

...

Expand
titleCrowdStrike Falcon Install Instruction for Mac
Deck of Cards
idCrowdstrike Install macOS
tabLocationleft
Card
labelmacOS 15 Sequoia
titlemacOS 15 Sequoia
Note

The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets

Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 15 Sequoia
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download Crowdstrike Falcon 1.6no image
4

Run the CrowdStrike installer you just downloaded

no image

5Click Continue for the "Introduction" and "Read Me" section


Leave the default destination as it is and click Continue

Note: if you do not see this screen, continue to the next step.

6Click Install

7Type in your computer password

8Click Install Software
9Click Allow to the popup saying "'Falcon' would like to filter network content"

10

A "System Extension Blocked" popup will appear, click Open System Settings


Warning

If you mistakenly click OK instead of the OK button was mistakenly clicked instead of Open System Settings here. You will see the below window popup A window from CrowdStrike will pop up (see below image) at some point during or after the installation and you will need .
Follow this instruction to fix it by following this instruction.

11For Falcon, slide the toggle to on (it will turn blue)

12Type in your computer password

13Click OK
14Click Done

15

click OK on the popup saying "Installer would like to modify apps on your Mac"

Note

You may see this screen pop up, do not worry or panic. Continue to follow the instructions here and everything will turn green.

16Click Close 

17

Click Move to Trash and continue to Step 2

Expand
titleStep 2 - CrowdStrike Falcon Permissions

Include Page
macOS 13 and later newer - CrowdStrike Falcon Full Disk Access
macOS 13 and later newer - CrowdStrike Falcon Full Disk Access

Card
labelmacOS 13 Ventura and 14 Sonoma
titlemacOS 13 Ventura and 14 Sonoma
Note

The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets

Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 13 Ventura and 14 Sonoma
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download Crowdstrike Falcon 1.6no image
4

Run the CrowdStrike installer you just downloaded

no image

5Click Continue for the "Introduction" and "Read Me" section


Leave the default destination as it is and click Continue

Note: if you do not see this screen, continue to the next step.

6Click Install

7Type in your computer password

8Click Install Software
9Click Allow to the popup saying "'Falcon' would like to filter network content"

10A "System Extension Blocked" popup will appear, click Open System Settings

11Select Privacy & Security

12Look for "System software from application "Falcon" was blocked from loading"
13Click Allow
14Type in your computer password

15Click Unlock
16

click OK on the popup saying "Installer would like to modify apps on your Mac"

Note

You may see this screen pop up, do not worry or panic. Continue to follow the instructions here and everything will turn green.

17Click Close 

18

Click Move to Trash and continue to Step 2

Expand
titleStep 2 - CrowdStrike Falcon Permissions

Include Page
macOS 13 and later newer - CrowdStrike Falcon Full Disk Access
macOS 13 and later newer - CrowdStrike Falcon Full Disk Access

Card
labelmacOS 12 Monterey
Note

The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets

Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 12 Monterey
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOS 12 and newerno image
2Run the CrowdStrike installer you just downloaded

no image

5Click Continue for the "Introduction" and "Read Me" section

6

Leave the default destination as it is and click Continue

Note: if you do not see this screen, continue to the next step.

7Click Install

8Type in your computer password

9Click Install Software
10Click Allow to the popup saying "com.crowdstrike.falcon.app" would like to filter network content"

11A "System Extension Blocked" popup will appear, click Open Security Preferences

12Select Security & Privacy

13Click the Lock icon on the bottom left

14Type in your computer password
15Click Unlock
16

Look for "System software from application "Falcon.app" was blocked from loading", and click Allow

Note

You may see this screen pop up, do not worry or panic. Continue to follow the instructions here and everything will turn green.

17Installation is done. Click Close 

18

Click Move to Trash and continue to Step 2

Expand
titleStep 2 - CrowdStrike Falcon Permissions

Include Page
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access

Card
labelmacOS 11 Big Sur
Note
  • The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets
  • Please be aware that CrowdStrike Falcon support for macOS 11 (Big Sur) will be discontinued on December 31, 2023
    • You will need to upgrade to a supported version of macOS and if you need help with the upgrade, email [email protected]
Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 11 Big Sur
1Go to software.lbl.gov and download CrowdStrike Falcon Sensor for macOS 11no image
2Browse to the location where the file LBL_CS_MacOS11_vX.X is downloaded, and double-click on it

3

It will extract a folder called LBL_CS_MacOS11_vX.X, open it.

Leave this folder open, you will return to it.

4Right-click on the GovLagger... file

5Select Open With
6Select Installer
7Click Continue for the "Introduction" and "Read Me" section

8Click Install

9Type in your computer password

10Click Install Software
11Click Close

12Return to the LBL_CS_MacOS11_vX.X folder from step 3 and right-click on the file configuration.command

13Select Open With
14Select Terminal
15Click Open to the popup saying "macOS cannot verify the developer of "configuration.command". Are you sure you want to open it?"

16

In the terminal window that pops up, type in your computer password and hit enter

Note: no character will appear when you type the password here.

17Click Allow to the popup saying "Falcon would like to filter network content"

18A "System Extension Blocked" popup will appear, click Open Security Preferences

19Select Security & Privacy

20Click the Lock icon on the bottom left

21Type in your computer password
22Click Unlock
23Look for "System software from application "Falcon" was blocked from loading", and click Allow

24

This process may take between 3-8 minutes. Once done you will see it say [Process Completed]

Continue to Step 2

Expand
titleStep 2 - CrowdStrike Falcon Permissions

Include Page
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access

Card
labelInstall CrowdStrike Falcon via BigFix

Please visit:

Expand
titleCrowdStrike Falcon Install Instruction for Windows
Deck of Cards
idCSF Windows
tabLocationleft
Card
labelManually Install CrowdStrike Falcon
Note

Instructions for Windows 10 and Windows 11 are essentially the same. The main difference is how they look.

The install instructions for Windows also apply to CrowdStrike For Home.


HTML
<iframe src="https://drive.google.com/file/d/189nVO4g-Au8jY4sDcfUMDg-GCdFkqseN/preview" width="1280" height="720" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for Windowsno image
2Browse to the location where the file LBL_CS_Win_Installer_vX.X is downloaded, and double-click on it

3

You may see the popup"Windows Protected your PC"

Click More info

If not, skip to Step 5

4Click Run anyway

5

The pop-up "Do you want to allow this app to make changes to your device?" will appear

Click Yes

6

A command prompt window will appear stating "This may take several minutes. This window will close when the full process is complete"

This process will take between 4 to 10 minutes

If you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

Note

During this process, you may see the following notifications in the bottom right corner. You can ignore it.

This happens because during the transient state, Sophos Antivirus is being removed and CrowdStrike Falcon is being installed.

7

Once the command prompt window disappears. You are done.

If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?

no image
Card
labelInstall CrowdStrike Falcon via BigFix

Please visit:

...