Getting devices under management
Getting devices under management takes four steps. As the admin, you enable the service and choose who gets it; each person then installs the agent on their own computer as part of their Secureframe onboarding.
Prerequisites
An active Secureframe Defense subscription with Federal MDM added. Talk to your CSM to add it and confirm your device count.
Supported devices: Windows 10/11, macOS 12 or later, or a supported Linux distribution.
Step 1: Enable Federal MDM (admin)
Contact your CSM to enable Federal MDM on your account and confirm the number of devices. Each managed device uses one license, so count every computer that will handle CUI. Once activated, the service shows as connected on your Integrations page.
Step 2: Choose who gets it (admin)
In Personnel Settings, under Onboarding, open Secureframe device management and select the personnel groups whose computers should be managed. You can verify who is in each group from the Groups tab.
Nothing installs on anyone's computer at this point. Selecting a group adds a Secureframe Federal MDM step to the Employee Onboarding of everyone in it.
Step 3: Install the agent (each device owner)
Everyone in the selected groups now sees a Secureframe Federal MDM step in their Employee Onboarding, alongside their other onboarding tasks like training and policies. Each person completes it on the computer that will be managed: download the installer for their operating system (Windows, macOS, or Linux) and run it.
Step 4: Verify enrollment (admin)
Enrolled devices appear in Federal MDM within about 15 minutes. From there you can track the devices.
Troubleshooting
Device doesn't appear in Federal MDM: confirm the agent installed successfully and the device has internet connectivity, then allow up to 15 minutes for the first sync.
A compliance check is failing: open the device's details to see which setting is out of line. Some settings remediate automatically; others list the manual fix. A restart resolves some pending states.
Uninstalling the Secureframe Federal MDM
For Admins
Important: You must have an Admin role to delete devices.
For admins, the easiest way to uninstall Secureframe Federal MDM from a device is to delete the device from the Federal MDM page.
To delete a single device, open the three-dot menu next to the device, then click Remove device. To delete multiple devices, select them with the checkboxes in the left column, then click Remove device.
For Individual Users
Note: It's preferable to remove devices in the Secureframe app whenever possible. Use the scripts below only if that is not an option.
Uninstallation scripts are attached to this article for each operating system.
Windows
Download the attached zip uninstall-secureframe-federal-mdm.zip and extract it to get the PowerShell script uninstall-secureframe-federal-mdm.ps1. Open PowerShell as Administrator, navigate to the folder with the extracted script, and run:
powershell -ExecutionPolicy Bypass -File .\uninstall-secureframe-federal-mdm.ps1
macOS
Download the attached Bash script uninstall-secureframe-federal-mdm.sh. Open Terminal, navigate to the folder with the script, and run:
chmod +x uninstall-secureframe-federal-mdm.sh sudo ./uninstall-secureframe-federal-mdm.sh
Linux
A Bash script named linux-uninstall-secureframe-federal-mdm.sh is attached to this article. On the device, go to /opt/NinjaRMMAgent/programfiles/ and run the uninstall command that matches your distribution:
sudo ./ninja-deb-uninstall.sh sudo ./ninja-deb-harakiri.sh sudo ./ninja-rpm-uninstall.sh
Frequently Asked Questions (FAQ)
Where do I manage USB devices?