--- title: "Deploying CrowdStrike as a Custom App" slug: "deploying-crowdstrike-as-a-custom-app" updated: 2025-06-09T17:07:17Z published: 2025-06-09T17:07:57Z canonical: "support.kandji.io/deploying-crowdstrike-as-a-custom-app" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.kandji.io/kb/llms.txt > Use this file to discover all available pages before exploring further. # Deploying CrowdStrike as a Custom App ### Prerequisites > [!WARNING] > Intel-based Mac computers require the KEXT version of the Crowdstrike settings profile when using Crowdstrike's Firmware Analysis feature. If you are not using Firmware Analysis, we recommend using the non-KEXT versions of the custom settings below. - CrowdStrike installer from the vendor (Hosts > Sensor Downloads) - Crowdstrike Custom Settings - **All Mac Architectures** - macOS 15 (Sequoia) ([GitHub Link](https://github.com/kandji-inc/support/blob/main/custom-apps/crowdstrike/crowdstrike_settings_macOS15.mobileconfig)) - **Apple Silicon** - All macOS Versions ([GitHub Link](https://github.com/kandji-inc/support/blob/main/custom-apps/crowdstrike/crowdstrike_settings.mobileconfig)) - **Intel with KEXT** - All macOS Versions ([GitHub Link](https://github.com/kandji-inc/support/blob/main/custom-apps/crowdstrike/crowdstrike_settings_with_kext.mobileconfig)) - CrowdStrike Service Management Profile - macOS 13 (Ventura) - macOS 15 (Sequoia) ([GitHub Link](https://github.com/kandji-inc/support/blob/main/custom-apps/crowdstrike/crowdstrike_service_management.mobileconfig)) - CrowdStrike Audit Script ([GitHub Link](https://github.com/kandji-inc/support/tree/main/custom-apps/crowdstrike/crowdstrike_falcon_ae_script.zsh)) - CrowdStrike Postinstall script ([GitHub Link](https://github.com/kandji-inc/support/tree/main/custom-apps/crowdstrike/crowdstrike_falcon_postinstall_script.zsh)) ### Considerations - The **CrowdStrike Settings Profiles** are designed the facilitate the approval of CrowdStrike across all network content filters, kernel extensions, system extensions, PPPC, and web-filtering requirements. This profile is compatible with both the older Falcon agent using kernel extensions and the latest version utilizing system extensions. - You will need to deploy both the **crowdstrike_settings_macOS15** and **crowdstrike_settings** profiles following the steps in the [Deploying with Assignment Maps](/v1/docs/deploying-crowdstrike-as-a-custom-app#deploying-with-assignment-maps) section to assign them correctly. - The **CrowdStrike Service Management Profile** handles essential login and background processes. - If you require it, the **Legacy System Extension (KEXT) Settings Profile** can be accessed via this [GitHub link](https://github.com/kandji-inc/support/tree/main/custom-apps/crowdstrike/crowdstrike_settings_with_kext.mobileconfig). - This profile supports both the Falcon agent with kernel extensions and the newer version with system extensions. - The KEXT payload is necessary only when using the CrowdStrike Firmware Analysis feature on Intel-based Mac computers. - Please note that depending on the specific CrowdStrike product and version you have installed, there may be variations in app paths, privacy access settings, and kernel or system extension requirements. As with any custom application, we strongly recommend thorough testing before deploying it to a production Mac. ### Add and Configure the Custom Profiles > [!NOTE] > The service management profile for Crowdstrike Falcon is compatible with macOS 13 Ventura and later. For macOS Monterey 12 and earlier, an Assignment Map must be used for advanced scoping to prevent the service management profile from being assigned to those devices. To learn more about deploying Crowdstrike in Assignment Maps, follow the [Deploying with Assignment Maps](/v1/docs/deploying-crowdstrike-as-a-custom-app#deploying-with-assignment-maps) section. To add this Library Item to your Kandji Library, follow the steps outlined in the [Library Overview](/kb/library-overview) article. 1. Give your Custom Profile a **Name**. 2. For **Install on**, select Mac. 3. Assign to your desired [Blueprints](/v1/docs/getting-started-with-assignment-maps). ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0907AM@2x.png) 4. Upload the CrowdStrike Settings Profile (or Legacy System Extension (KEXT) settings profile). **![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/2h7wntz3918tglf1aqik1_zegbwd4fnsya.png)** 5. Click **Save**. 6. Repeat the previous steps in this section for the **crowdstrike_settings_macOS15** and **crowdstrike_service_management** profiles. ### Add and Configure the Custom App To add this Library Item to your Kandji Library, follow the steps outlined in the [Library Overview](/kb/library-overview) article. 1. Give the Custom App a **Name**. Optionally, add a custom icon. 2. Assign to your desired [Blueprints](/v1/docs/getting-started-with-assignment-maps). ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0924AM.png) 3. Change the **Installation** to Audit and Enforce. 4. Copy and paste the crowdstrike_ae_script.zsh script from the [prerequisites](/v1/docs/deploying-crowdstrike-as-a-custom-app#prerequisites) into the **Audit & Enforce** text box. No modification is required. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0926AM@2x.png) 5. Select Installer **Package (install .pkg or .mpkg)** as the deployment type 6. Upload the installer package. 7. Paste the **Postinstall Script** referenced in the [Prerequisites](/v1/docs/deploying-crowdstrike-as-a-custom-app#prerequisites). - In the Post-Install script, update the **customerIDChecksum** variable on line 55 with your Customer ID - Optionally, paste your install token on line 59 inside the **installToken** variable; otherwise, leave it blank. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0929AM@2x.png) 8. Click **Save**. ### Deploying with Assignment Maps There are four Crowdstrike Custom Profiles that need conditional logic to ensure they are deployed to the correct devices. An Assignment Map provides an easy solution for all of your devices in one convenient view. Please review our [Creating a Blueprint](/v1/docs/getting-started-with-assignment-maps) and [Using Conditional Logic in Assignment Maps](/v1/docs/advanced-assignment-maps-configuration) articles. 1. Start with the **For All devices on this Blueprint** conditional block. 2. Assign the **Crowdstrike** Custom App to the block. - If multiple Custom Apps are needed, create a conditional block with conditions for the different versions of the installer. 3. Set the top of the conditional block to **If** **macOS is greater than or equal to 15.0**. 4. Assign the **crowdstrike_settings_macOS15** Custom Profile to the conditional block. 5. Set the top of the conditional block to **If** **Chip type is Apple Silicon**. 6. Assign the **crowdstrike_settings** Custom Profile to the conditional block. 7. Set the bottom conditional block to **else if Chip type is Intel**. 8. Assign the **crowdstrike_settings_with_kext** Custom Profile to the conditional block. 9. Set the top of the conditional block to **If macOS is greater than or equal to 13.0**. 10. Assign the **crowdstrike_service_management** Custom Profile to the conditional block. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0743AM.png)