## Single tenant installation

Here you install control agent and pair it directly with your tenant. If you need to install agent in bulk and pair with multiple tenants (MSP setting) navigate to the next section.

- Windows
- macOS

### Installation

1. Obtain PowerShell script  
   Navigate to your idemeum admin portal, click `Install agent` button, then choose `Control agent` and copy the installation script for Windows.

2. Execute script using PowerShell  
   Make sure you execute the script with PowerShell Administrator privileges.  
   Open PowerShell and execute the installation script with Administrator privileges. Idemeum will install all required prerequisites before installing the agent. No restart is required after successful installation.

### Command-line arguments

You can pass additional command-line arguments to the installation script:

- `-restartAfterInstall`  
   'true' | 'false'  
   Restart is not required, however you can still trigger the restart after the successful installation by passing `true` as an option.

- `-appControlMode`  
   'disabled' | 'audit' | 'rules'  
   By default when the agent is installed it operates in `disabled` mode. You can pass the mode which you want to apply at installation time.

- `-version`  
   '2.5.1'  
   Pass the desktop version that you want to install. By default the latest version will be installed. You need to pass the version with ”, for instance ‘2.5.1’.

### Installation

When installing macOS control agent you will need to enable security permissions, including Security Extension and Full Disk Access. We recommend deploying production agents with MDM profile to make sure permissions stay enabled after agent updates.

1. Obtain profile and script for macOS  
   Navigate to your idemeum portal, click `Install agent`, choose `Control agent`, then select `macOS` and download profile and script.

2. Deploy profile with your MDM  
   Push the idemeum profile to macOS workstations where idemeum agent will be deployed. Profile automatically enables all required settings.

3. Deploy bash script  
   Now you can deploy the idemeum script to your workstations using the deployment tool of your choice (MDM, RMM, etc.). No restart is required after installation.

### Command-line arguments

You can pass additional command-line arguments to the installation script:

## Bulk agent installation

Bulk installation helps MSPs to deploy agent across multiple tenants with a single command. Instead of obtaining installation command from a customer tenant, obtain a command from your MSP tenant instead. Then you can use this command with RMM and leverage RMM variables to dynamically pass the customer name to an installation command. Idemeum control agent will automatically create customer tenants.

1. Obtain bulk command from MSP parent tenant  
   Login to your MSP tenant, click `Bulk agent install` and then choose `Control agent`. Copy the installation command for Windows or download the profile and installation script for macOS.

2. Store the command in your RMM  
   Store the bulk installation command in your RMM. Make sure you leverage proper customer name variable and pass it to the installation script `-customerName` input variable.

3. Explore integration guides  
   Check our [integration](https://docs.idemeum.com/integrations) page to explore the examples of how to deploy idemeum agent with various RMMs.