Upgrading to Crowdstrike Falcon - macOS

To better protect NEIU computers from cybersecurity threats, University Technology Services will be retiring Carbon Black and replacing it with Crowdstrike Falcon.

For macOS computers, this will be done in the background and no technician will need to visit your computer. This process will bring up a few dialog boxes which can be dismissed by the user. These dialog boxes are there as a result of retiring Carbon Black and installing Falcon.

Step 1. Removing Carbon Black.

When the Carbon Black configuration profiles are disabled, the following messages will appear:

“VMware CBCloud” would like to use a new endpoint security extension.

Click OK.

 

“VMware CarbonBlack Cloud Sensor” Would like to Filter Network Content

Click Don’t Allow.

 

Step 2. Carbon Black is uninstalled.

When Carbon Black is uninstalled, no further messages will appear on the screen. The application will be silently removed from the Applications folder.

Step 3. Falcon is installed.

Falcon will be automatically installed onto your computer. During installation, the computer will alert you with two notifications:

For Background Items Added, simply dismiss the notification. An “x” will appear on the top left corner of the screen when the cursor runs over the message. Click on the “x” to dismiss the notification.

 

For “Falcon Notifications” Notifications, select Allow.

 

The Falcon application will appear in your Applications folder. No other action is necessary.

 

Frequently Asked Questions

Carbon Black was removed from my computer but Falcon has not been installed.

After Carbon Black has been removed, it may take up to a day’s time before Falcon is installed.

 

Carbon Black is still on my computer and Falcon was never installed.

Falcon requires a macOS version of 13.x (Ventura) or higher. If you do not know which version of the macOS you have on your computer or would like assistance in upgrading your macOS, please contact the IT Service Desk.

 

Do I need to be on campus for this process to run?

No, you do not need to be on campus. The computer just needs to be running and connected to the Internet.

 

An IT Service Desk technician has requested my Mac computer’s serial number. How do I locate it?

It can be found by clicking on the Apple Menu located on the top-left corner of the screen and selecting About This Mac. Apple also has a support document with detailed steps for locating the serial number: Find your Mac model name and serial number.