University Systems help centre

Install Microsoft Defender for Endpoint (MSDE): MacOS

Supported for MacOS 10.14+

These instructions are provided for self-managed computers and will require administrator access to complete. They are not for computers supported by Desktop Support Services.

Note: If you have any other Antivirus product installed on your computer, it will need to be removed before you can install Microsoft Defender for Endpoint. See this article for uninstallation instructions for Symantec Endpoint Protection.

 

Prerequisite: For the new Apple M1 processors, MSDE currently requires installing Rosetta 2 prior to installing MSDE. See the Documentation from Apple on installing Rosetta.

 

1. Download the MSDE installer from here.

2. Double-click the “Install MSDE.pkg” icon to begin the installation.

Install MSDE Icon

3. On the introduction page, click the Continue button.

introduction page

4. Select your computer hard drive as the install destination and then click the Continue button.

Install Location

 5. Click the Install button to begin the installation.

Begin Installation

6. Enter the username and password of an administrator account on your computer. Click the Install Software button when done.

authenticate screen

 7. It will take a few minutes for the software to install.

Install Progress screen

 

8. macOS 10.14 and 10.15: A notification window “System Extension Blocked” will appear during the installation. This system extension is an important component of Microsoft Defender and will need your permission to enable this extension. To enable this extension, first click the “Open Security Preferences” button.

System Extension Blocked Catalina

The macOS Security & Privacy preference pane will open. Click the Allow button beside the text “System software from developer ‘Microsoft Corporation’ was blocked from loading.”

You may need to click the lock icon on the bottom left corner of the Security & Privacy window and then enter the username and password of an administrator account before you can click the “allow” button.

Privacy Allow

When you click the Allow button, this message will no longer be visible.

Close the macOS Security & Privacy preference pane by clicking the red icon (upper left corner).

 

8a. macOS 11 Big Sur: A notification window “System Extension Blocked” will appear during the installation. This system extension is an important component of Microsoft Defender and will need your permission to enable this extension. To enable this extension, first click the “Open Security Preferences” button.

System Extension Blocked Big Sur

The macOS Security & Privacy preference pane will open. Click the “Details…” button beside the text “Some system software requires your attention before it can be used.”

You may need to click the lock icon on the bottom left corner of the Security & Privacy window and then enter the username and password of an administrator account before you can click the Details button.

Privacy Allow Big Sur

Place a check beside “Microsoft Defender ATP.app” then click the OK button.

Microsoft Defender permit prompt

Close the macOS Security & Privacy preference pane by clicking the red icon (upper left corner).

You will see a prompt that “Microsoft Defender ATP would like to filter network content.” Click the Allow button.

Allow Filter Content Network prompt

 

9. Click the Close button when you see “The installation was successful” window.

Installation Successful Window

10. Click the Microsoft Defender ATP icon in the upper right corner of your screen. From the menu that appears, choose “Action recommended". Alternatively, you can open Microsoft Defender ATP from the Applications folder.

Microsoft Defender ATP icon

 

11. When the Microsoft Defender ATP application opens, you will see a white banner at the top of the window with a message “Microsoft Defender ATP needs attention.” Click the blue “Fix” button to continue.

Microsoft Defender ATP Fix

 

12. The macOS Security & Privacy preference pane will open. You will need to give Microsoft Defender full disk access to your computer. To do this, place a check mark beside “Microsoft Defender ATP”.

You may need to click the lock icon on the bottom left corner of the Security & Privacy window and then enter the username and password of an administrator account before you can allow full disk access.

Microsoft Defender Full Disk Access disabled

Microsoft Defender Full Disk Access enabled

 

13.Microsoft Defender for Endpoint is now setup.

 

* Note: MSDE, Microsoft Defender for Endpoint is the same product as Microsoft Defender ATP