Quick start
If your employer asked you to install the Secureframe Agent, follow these four steps:
Download your agent package from the Employee Onboarding page (Device Management in the left sidebar). Select your operating system and click Download agent. Each person gets a unique package, so only download from your own account.
Install the package on your device. Windows: Double-click the downloaded file and click Yes. Mac: Double-click the downloaded file and click Install. Linux: Open a terminal in the download folder and run
sudo dpkg -i secureframe-agent.deb(Ubuntu) orsudo rpm -i secureframe-agent.rpm(CentOS/RHEL).Confirm your device: Go back to Device Management, click Next, then click Look for my device. When it shows Device found, the onboarding step is complete. This can take a few minutes.
Check your settings. The page shows each security setting on your device as Enabled or Not enabled. If one your organization requires is not enabled, click How to fix this, change the setting, then click Refresh (see below).
Tip: Having trouble downloading or installing? See our FAQs: Secureframe Agent: overview and common questions for help with a spinning download button, offline agent, macOS install warnings, and more.
Supported Operating Systems
Secureframe Agent is a read-only agent that reports key device settings your organization needs for compliance. It only sends the minimum data required to determine whether a device is compliant.
These are the current operating system versions we support:
OS | Supported version(s) |
MacOS | 13.X+ (Ventura and above) |
Windows | 10, 11 |
Linux | Ubuntu 20.04+, RHEL 9.0+, CentOS 8 (EoL) |
Note: ChromeOS / Chromebooks are not supported. If you only use a Chromebook, tell your Secureframe admin so they can handle compliance another way.
Installing the Secureframe Agent on Your Device
If you received an onboarding email from Secureframe, your employer has partnered with us to streamline compliance tasks such as security training, policy reviews, and device management.
This guide walks through how to download and install the Secureframe Agent, also called Device Management in Employee Onboarding. You will not find the download in admin Personnel Settings.
Downloading your Agent package
Log into Secureframe and open Employee Onboarding.
In the left sidebar, click Device Management.
Under Install the agent, select your operating system and click Download agent.
Tip: If the download button keeps spinning, wait a few minutes and refresh the page. Secureframe builds a unique installer for each user, which can take a few minutes. For more help, see FAQs: Secureframe Agent installation, coverage, and troubleshooting.
Installing your Agent package
Windows: Double-click your downloaded package and click Yes.
MacOS: Double-click your downloaded package and click Install. If macOS shows a “could not verify” / blocked developer warning, see the macOS install guidance in FAQs: Secureframe Agent installation, coverage, and troubleshooting.
Linux: Open a terminal in the download folder and run
sudo dpkg -i secureframe-agent.debfor Ubuntu (.deb), orsudo rpm -i secureframe-agent.rpmfor CentOS/RHEL (.rpm).
After installing, click Next to go to Confirm your device, then click Look for my device. Secureframe looks for your device for up to 5 minutes. When it shows Device found, the onboarding step is complete.
If your operating system is not listed, choose Other under Select your operating system, type the one you use, and click Submit. This completes the onboarding step.
Important:
One package per person: Each download is a unique installation package that links your user account to your device. Do not install the same package on multiple devices or share your download link. That can cause devices to disappear or report incorrect statuses.
Windows Defender warnings: If using Windows Defender, you may see an unknown publisher warning. Secureframe Agent packages are signed for users joined after Feb 8, 2025. Contact your admin if this is a problem. Manual evidence can be uploaded if you choose not to install the Agent.
Additional security settings after install
Once your device is found, Device Management shows its name, serial number and last check-in, and each security setting as Enabled or Not enabled. After you change a setting, click Refresh to check again.
Your organization may require specific security settings on your device. If a setting shows Not enabled, click How to fix this next to it, or use the guides below for step-by-step setup:
A setting the agent cannot read on your device is not shown. On Linux, some checks are not supported due to operating system limitations. See Fields Pulled for details.
Installed but onboarding still incomplete?
If you installed the agent but Device Management says "We haven't seen your device yet", or your admin says your device is missing, check the following before contacting support:
Allow time to check in. Keep the device online for at least 5 minutes after install, then click Check again. It can take a few hours before your admin sees the device in Asset Inventory.
Continue without confirming. If your device is still not found, click Continue without confirming my device. The link appears about a minute after you start looking. It completes the onboarding step.
Use only your own package. Each user must download and install their own agent build. Installing the same package on multiple devices (or sharing a download link) can prevent devices from reporting correctly.
Confirm the agent is running. On Windows, check Services for Fleet osquery or Orbit Osquery. If the agent shows as offline, see the FAQ articles under More help.
Re-download if needed. If installation appeared successful but nothing syncs, uninstall the agent, download a fresh package from Employee Onboarding, and reinstall. Uninstall the old agent before installing a new one.
If the issue persists after trying the steps above, contact [email protected] with your device name, operating system, and the email address you use to log into Secureframe.
Frequently Asked Questions (FAQ)
Where do I download the Agent? I do not see a Download button.
Open Employee Onboarding → Device Management (left sidebar). The Agent download is not under admin Personnel Settings. If your org enabled Agent only for certain personnel groups, you may see an install task without a download button. Ask your Secureframe admin to confirm your group is included.
Can I install Secureframe Agent on a Chromebook?
No. ChromeOS is not supported. Tell your admin so they can track compliance another way for Chromebook users.
How do I know the install worked?
On Device Management, click Look for my device. When it shows Device found, the install worked and the onboarding step is complete. Your admin can confirm the device in Asset Inventory after check-in.
It says "We can't check for your device yet." What should I do?
Your Secureframe admin needs to finish setting up the Secureframe Agent for your organization. Contact your admin.
macOS blocked the installer or the Agent crashes on a new macOS version. What should I do?
See the macOS install and crash troubleshooting questions in FAQs: Secureframe Agent installation, coverage, and troubleshooting, or contact support with your macOS version and whether the device is Apple Silicon or Intel.
More help
For additional questions about installation, troubleshooting, and agent behavior, see:
FAQs: Secureframe Agent: overview and common questions, download spinner, offline agent, confirming installation, and more
FAQs: Secureframe Agent installation, coverage, and troubleshooting, device not appearing, reinstalled agent, macOS install errors, and more
Unenrolling & Uninstall Secureframe Agent, how to remove the agent from your device