Skip to main content

Zenarmor Endpoint Application Installation

Zenarmor® provides you with two powerful deployment options, tailored to meet your unique cybersecurity needs based on your subscription type.

  1. Perimeter Protection with Zenarmor Gateway Deployment: Deploy Zenarmor as a gateway on a perimeter firewall or routing platform, such as OPNsense or pfSense CE. This option ensures that your network is fortified at its entry points, providing a robust shield against external threats.

  2. Comprehensive Endpoint Security with Zenarmor Endpoint Application: Install the Zenarmor endpoint application directly on devices like desktop PCs, laptops, or servers. This solution offers unparalleled protection against cyberattacks from the internet while giving you the tools to enforce web and application controls seamlessly. With Zenarmor SASE, no matter where users are located, they can securely access internal resources through private networks, ensuring flexibility without compromising security.

In this documentation, we provide a comprehensive list of the platforms supported by the Zenarmor Endpoint application. Additionally, we outline the straightforward steps required to install the Zenarmor Endpoint application on each of these supported platforms.

warning

To get benefit of Zenarmor endpoint application and protect your endpoints you must have Zenarmor SSE and higher editions

Supported Platforms​

Zenarmor SSE and higher editions can be deployed directly on user endpoints. The following platforms are supported by Zenarmor endpoint application.

  • MS Windows (Windows 10 (version 1709 and later) and Windows 11)
  • macOS (macOS 12 and higher versions)
  • Linux (Ubuntu 22.04+, Debian 12+, Fedora 41+, and their equivalents)

Supported Device Management Tools​

Zenarmor endpoint application can easily be deployed on your organization's devices with the help of the following device management tools.

  • Jamf (MDM solution for macOS and iOS devices)
  • Microsoft Intune (MDM solution for Windows, macOS, iOS, and Android devices)

Installing on MS Windows​

Zenarmor provides multiple installation options for Windows endpoints. Choose the method that best fits your environment, privileges, and software distribution strategy, then follow the steps to download and install the agent. There are five methods for installing the Zenarmor endpoint application on Microsoft Windows platforms:

  1. Standalone Installer
  2. Microsoft Store
  3. Chocolatey
  4. WinGet
  5. PowerShell Script

Method 1: Standalone Installer (GUI)​

You may download the Windows installer(.msi) that is pre-associated with your Organization from Zenconsole and run a guided setup. Ideal for one-off or remote installs.

To install Zenarmor on your Microsoft Windows computer by following the next steps:

  1. Open the Add an Endpoint window in Zenconsole and switch to the Windows tab.

    Figure 1. Add an Endpoint to Your Deployment - Standalone Installer

  2. Click Zenarmor x86_64 installer to download the Windows installer (.msi) file that’s already linked to your Organization.

    tip

    For remote devices, copy the download URL from this window and send it to the user/technician. Or remote users may download the generic Zenarmor Windows installation file, such as zenarmor-x64.msi, from the download page and then register with the organization.

  3. Run the installation file by double-clicking on it. This will launch the Zenarmor setup wizard.

    Figure 2. Welcome to the Zenarmor Setup Wizard

  4. Click Next to proceed with the setup wizard.

  5. Click Next to install the application into the default folder, C:\Program Files\Zenarmor\. You may select a new installation folder by clicking on the Change...

    Figure 3. Selecting Destination Folder

  6. Click Install to start the installation.

    Figure 4. Starting Installation

  7. Wait while the setup wizard installs Zenarmor.

    Figure 5. Installing Zenarmor on Windows

  8. Click Finish to exit the setup wizard and launch Zenarmor.

    Figure 6. Installation Finished

Now, you must authenticate & register your Windows endpoint to your organization on the Zenconsole.

warning

To be able to protect Microsoft Windows endpoints using Zenarmor, you need to register your endpoints with Zenconsole.

Before starting endpoint registration, ensure that an organization is set up with an identity and access management configuration already completed on Zenconsole.

Organization features and endpoint support are only available on SSE and higher subscriptions.

Method 2: Microsoft Store​

Install Zenarmor on your Windows endpoint directly from the Microsoft Store for a familiar, centrally managed update channel. The Store handles delivery and updates, making it a good fit for modern device management.

You can easily install Zenarmor on your Microsoft Windows computer by following the next steps:

  1. Open the Add an Endpoint window in Zenconsole, then switch to the Windows tab.

  2. Access the Zenarmor app page in one of these ways:

    a. Click the Microsoft Store link shown under Method 2 on this window,

    b. Or open the Microsoft Store app on the device and search for “Zenarmor.”

    Figure 7. Add an Endpoint to Your Deployment - Microsoft Store

  3. On the Microsoft Store page, click Install.

    Figure 8. Microsoft Store - Zenarmor Search

  4. If prompted, sign in to the Store and approve any permissions or UAC prompts (User Account Control popups).

  5. When the installation completes, search for “Zenarmor” in the Start menu and launch the app manually.

Now, you must authenticate & register your Windows endpoint to your organization on the Zenconsole.

warning

To be able to protect Microsoft Windows endpoints using Zenarmor, you need to register your endpoints with Zenconsole.

Before starting endpoint registration, ensure that an organization is set up with an identity and access management configuration already completed on Zenconsole.

Organization features and endpoint support are only available on SSE and higher subscriptions.

Method 3: Chocolatey​

Chocolatey is a package manager for Windows that lets you install software using simple commands. If your organization already uses Chocolatey to manage software on Windows devices, you can use it to automate Zenarmor deployment.

Follow these steps to install Zenarmor with Chocolatey:

  1. Open an elevated PowerShell window. Click Start, type PowerShell, then right-click Windows PowerShell and select Run as Administrator.

  2. (If needed) Install Chocolatey. If you don’t already have Chocolatey installed, run the command below once. After it finishes, close and reopen PowerShell as Administrator.

    Set-ExecutionPolicy Bypass -Scope Process -Force;
    [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;
    iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))

  3. Open the Add an Endpoint window in Zenconsole and switch to the Windows tab.

  4. Locate Method 3: Chocolatey, as shown below, and copy the command provided there.

    Figure 9. Add an Endpoint to Your Deployment - Chocolatey

  5. Run the copied command in the elevated PowerShell window.

  6. Alternatively, you can use the command provided below, just replace organization-name with your actual Organization ID from Zenconsole.

    choco install zenarmor -y --params="'/Organization:organization-name"

  7. When the installation completes, open the Start menu, search for “Zenarmor”, and launch the app.

Now, you must authenticate & register your Windows endpoint to your organization on the Zenconsole.

warning

To be able to protect Microsoft Windows endpoints using Zenarmor, you need to register your endpoints with Zenconsole.

Before starting endpoint registration, ensure that an organization is set up with an identity and access management configuration already completed on Zenconsole.

Organization features and endpoint support are only available on SSE and higher subscriptions.

Method 4: WinGet​

WinGet is the official Windows Package Manager. It lets you install software from the command line quickly and reliably. If you already use WinGet in your environment, this method is a fast and script-friendly way to deploy Zenarmor.

Follow these steps to install Zenarmor with WinGet:

  1. Open the Add an Endpoint window in Zenconsole and switch to the Windows tab.

  2. Under Method 4 (WinGet), copy the installation script shown there. Also, you can use the command provided below,

    winget install Zenarmor.Zenarmor

    Figure 10. Add an Endpoint to Your Deployment - WinGet

  3. Open an elevated PowerShell window. Click Start, type PowerShell, then right-click Windows PowerShell and select Run as Administrator.

  4. Paste the script into the PowerShell window and press Enter to run it.

  5. After the script finishes, open the Start menu, search for “Zenarmor”, and launch the app.

Now, you must authenticate & register your Windows endpoint to your organization on the Zenconsole.

warning

To be able to protect Microsoft Windows endpoints using Zenarmor, you need to register your endpoints with Zenconsole.

Before starting endpoint registration, ensure that an organization is set up with an identity and access management configuration already completed on Zenconsole.

Organization features and endpoint support are only available on SSE and higher subscriptions.

Installing on macOS​

You can install Zenarmor on macOS devices using one of the following two methods. Both methods install the same application; choose the one that best fits your environment.

  • Method 1: Standalone Installer: This method uses a standard .pkg installation file. It is recommended for manual installations on individual devices through the graphical interface.

  • Method 2: Shell Script: This method downloads the installer linked to your Organization ID and runs it from the Terminal. It is recommended for automated or remote deployments.

Installing on macOS via Standalone Installer (Method 1)​

You can install Zenarmor on your macOS device by following the next steps.

  1. Download the Zenarmor macOS installation file, such as Zenarmor_2.0_aarch64.pkg, from the download page.

  2. Run the installation file, such as Zenarmor_2.0_aarch64.pkg, by double-clicking on it. This will launch the Zenarmor setup wizard.

  3. Click Continue to proceed with the setup wizard.

  4. Click Install to start the installation. You may need to type the password to allow the new software installation.

    Figure 11. Starting Installation

  5. Enter username and password to allow making changes to the System Certificate Trust Settings, which is required for full TLS inspection.

    Figure 12. Update System Certificate Trust Settings on macOS

  6. Wait while the setup wizard installs Zenarmor.

    Figure 13. Installing Zenarmor on macOS

  7. Click Close to exit the setup wizard and launch Zenarmor.

    Figure 14. Installation Finished

Now, you must authenticate & register your macOS endpoint to your organization on the Zenconsole.

warning

To be able to protect macOS endpoints using Zenarmor, you need to register your endpoints to Zenconsole.

Before starting endpoint registration, you should have an organization set up with identity and access management configuration already completed on Zenconsole.

Organization features and endpoint support are only available on SSE and higher subscriptions.

Installing on macOS via Shell Script (Method 2)​

If you prefer an automated installation, you can use the Shell Script method. This method downloads the Zenarmor installer associated with your Organization ID and runs the installation silently from the command line.

You may follow these steps to install the Zenarmor endpoint application on macOS via shell script:

  1. Open the Add an Endpoint window in Zenconsole and switch to the macOS tab.

  2. Locate Method 2: Shell Script, as shown below, and copy the command provided there.

    Figure 15. Add an Endpoint to Your Deployment - Shell Script

  3. Open the Terminal on your macOS device.

  4. Paste and run the copied command.

  5. Once the installation is complete, search for Zenarmor in Launchpad and open the application.

Now, you must authenticate & register your macOS endpoint to your organization on the Zenconsole.

warning

To be able to protect macOS endpoints using Zenarmor, you need to register your endpoints to Zenconsole.

Installing on Linux Desktop​

You may install the Zenarmor endpoint application on your Linux device in three ways.

1. Linux CLI endpoint application: You may install and run the Zenarmor endpoint application via Linux CLI when your Linux system, such as a server, does not already have installed GUI environment.

2. Linux GUI endpoint application: You may install and run the Zenarmor endpoint application via your Linux GUI.

3.Linux Shell Script Installation: You may install the Zenarmor endpoint application by running a single shell script provided in the Zenconsole for quick and automated deployment.

warning

To be able to protect Linux endpoints using Zenarmor, you need to register your endpoints to Zenconsole

Before starting endpoint registration, you should have an organization set up with identity and access management configuration already completed on Zenconsole.

Organization features and endpoint support are only available on SSE and higher subscriptions.

Linux CLI Installation​

You may easily install Zenarmor on your Linux desktop computer by following the next steps.

  1. Running the next commands on your Linux CLI as root or user with sudo privileges.

    curl -O https://updates.zenarmor.net/zenarmor-headless-install.sh
    sh -x  zenarmor-headless-install.sh

    This will install Zenarmor packages on your Linux system. At the end of the installation, an activation code and activation link QR code will be displayed as given below.

    Figure 16. Linux Activation Code and QR Code

  2. You may go to https://dash.zenarmor.com/connect and enter the activation code displayed in the first step for endpoint registration. Or you may scan the QR code to complete your endpoint registration.

warning

Beware that you must complete endpoint registration in 10 minutes.

Linux GUI Installation​

You may easily install Zenarmor GUI application on your Linux device by following the next steps.

  1. Download the Zenarmor Linux x86_64 or aarch64 installation file, such as zenarmor-installer-arm64.run, from the download page.
  2. Go to Properties menu by right clicking on the file.
  3. Enable Run option by switching on the toggle bar.
  4. Right click on the file.
  5. Run the installation file by clicking on the Run. This will launch the Zenarmor setup wizard.
  6. Click Continue to proceed with the setup wizard.
  7. Click Install to start the installation. You may need to type the password to allow the new software installation.
  8. Enter username and password to allow making changes to the System Certificate Trust Settings, which is required for full TLS inspection.
  9. Wait while the setup wizard installs Zenarmor.
  10. Click Close to exit the setup wizard and launch Zenarmor.

Now, you must authenticate & register your Linux endpoint to your organization on the Zenconsole.

Linux Shell Script Installation​

You can install Zenarmor on your Linux device using a single shell script command provided in the Zenconsole. This method is ideal for quick and automated deployments.

  1. Open the Add an Endpoint window in Zenconsole and switch to the Linux tab.

  2. Locate Method 2: Shell Script, as shown below, and copy the script shown there.

    Figure 17. Add an Endpoint to Your Deployment - Shell Script

  3. Open a terminal on your Linux device as a user with sudo privileges.

  4. Paste and run the copied script in the terminal.

  5. Wait until the installation finishes. Zenarmor will be installed automatically.

Now, you must authenticate & register your Linux endpoint to your organization on the Zenconsole.

Installing on Android​

You can easily install Zenarmor on your Android devices via the Google Play Store.

  1. Open the Google Play Store on your Android device.

  2. Search for the Zenarmor Private Access application.

  3. Tap Install and wait for the application to be downloaded and installed.

    Figure 18. Searching for Zenarmor Private Access Application

  4. After the installation completes, locate the Zenarmor Private Access app on your Android device (from the app drawer or home screen) and launch it manually.

Now, you must authenticate & register your Android endpoint to your organization on the Zenconsole.

Figure 19. Zenarmor Private Access Application

warning

To be able to protect Android endpoints using Zenarmor, you need to register your endpoints to Zenconsole.

Before starting endpoint registration, ensure that an organization is set up with an identity and access management confi

Organization features and endpoint support are only available on SSE and higher subscriptions.

Deploy via Jamf (MDM for macOS/iOS)​

Jamf is a Mobile Device Management (MDM) solution for managing macOS and iOS devices at scale. If your organization uses Jamf, you can remotely deploy Zenarmor to managed macOS devices without requiring any manual user actions on each device.

To deploy Zenarmor as a custom app in your Jamf Now organization, follow the steps below.

  1. Download the macOS desktop application, Zenarmor aarch4 installer.

  2. Then run it and follow the installation steps to complete the setup.

  3. Upload the installation package to the Jamf Now environment.

    Figure 20. Uploading the Installation Package

    Figure 21. Uploading the Installation Package-2

  4. Wait for the package to finish uploading.

    Figure 22. Waiting for the Upload

  5. Add the application to your organization with any name you prefer. If you include the version number in the application name, you can later follow the same process to add the new version with a different name, allowing you to install the new Zenarmor application version on your organization's devices via Jamf Now.

    Figure 23. Adding the Application to Your Organization

  6. Add the uploaded application to the active "Blueprint" channel in your organization.

    Figure 24. Adding the Application to the Blueprint Channel

    Figure 25. Adding the Application to the Blueprint Channel-2

  7. After saving the changes, the devices in your organization will silently install the application during the next synchronization.

The following video shows how to deploy Zenarmor on macOS devices using Jamf MDM. You may watch this video to learn how to upload the Zenarmor package to Jamf, create a deployment policy, and assign it to your managed devices.

How to Deploy Zenarmor on macOS Devices via Jamf MDM

Deploy via Microsoft Intune (Windows/macOS/iOS/Android)​

Microsoft Intune is a cloud-based Mobile Device Management (MDM) and Mobile Application Management (MAM) platform. If your organization uses Intune, you can deploy Zenarmor remotely to managed Windows, macOS, iOS, and Android devices without requiring manual setup by end users.

Zenarmor Installation on Windows Device via Microsoft Intune(Win 10-11)​

To deploy Zenarmor to Windows devices via Microsoft Intune, follow the steps below.

  1. Log in to the Microsoft Intune portal.
  2. Navigate to Apps > Windows > Add.
  3. Select the Microsoft Store app (new) as the source.
  4. Search for Zenarmor in the store and select it.
  5. Verify app details and click Next.
  6. In Assignments, assign the app as Required to the Windows Pro device group.
  7. Save and confirm the app is added to Intune.
  8. Enroll the test device in Intune (Settings > Accounts > Access work or school > Connect).
  9. Verify that the device appears as managed in Intune.
  10. Wait for the app to be automatically installed.
  11. Confirm Zenarmor appears in the Start menu and launches correctly.

The following video shows how to deploy Zenarmor to Windows devices using Microsoft Intune:

Zenarmor Installation on a macOS device via Microsoft Intune​

To deploy Zenarmor to macOS devices via Microsoft Intune, follow the steps below.

  1. Log in to the Microsoft Intune portal.
  2. Navigate to Apps > macOS > Add > Line-of-business app and upload the Zenarmor package.
  3. Verify app details and click Next.
  4. In Assignments, assign the app as Required to the macOS device group.
  5. Save and confirm the app is added to Intune.
  6. Enroll the macOS device in Intune.
  7. Verify that the device appears as managed in Intune portal.
  8. Wait for the application to install on the device.
  9. Confirm Zenarmor is visible in Launchpad and can be launched.

The following video show how to upload the Zenarmor package to Intune, create a deployment profile, and assign it to user groups or devices.

Video​

Here is a video on Zenarmor Endpoint Application for Windows.

Last updated on by Zenarmor