# macOS Stealth Installation

## Prerequisites

| Requirement       | Detail                                |
| ----------------- | ------------------------------------- |
| **OS**            | macOS 10.13 (High Sierra) or later    |
| **Admin rights**  | **Required** for Stealth mode         |
| **Apple Silicon** | Rosetta must be installed if prompted |

{% hint style="danger" %}
**Never rename the stealth installer file.** The encoded filename contains your organization's license key and configuration. Renaming it or allowing extra characters to be appended (e.g. `(1)` from duplicate downloads) will cause the installation to fail. Use the file exactly as downloaded.
{% endhint %}

## Download the Installer

1. Log in to the We360.ai web portal as an administrator.
2. Click the **Download Apps** button in the top bar.
3. In the **Mac** section, click **Stealth** to download the installer (filename is a Base64-encoded string ending in `.pkg`).

## Install

1. Locate the `<encoded-name>.pkg` file in your Downloads folder and double-click it.
2. If macOS displays *"macOS cannot verify that this app is free from malware"*, click **OK**.
3. Open **System Settings > Privacy & Security**. Scroll to **Security** and find the blocked installer message. Click **Open Anyway**.
4. Enter your macOS credentials when prompted.
5. Click **Open** on the confirmation dialog.
6. The installer window appears. Click **Continue**.
7. If prompted with *"Installer would like to access files in your Downloads folder"*, click **OK**.
8. Select the destination disk and click **Continue**.
9. Click **Install**, then enter credentials and click **Install Software**.
10. When "The installation was successful" appears, click **Close**.
11. Optionally keep or discard the PKG file when prompted.

### Permissions

In stealth mode, macOS permission prompts will still appear for the logged-in user:

* **Accessibility** -- prompted on first run. Must be approved in System Settings.
* **Screen Recording** -- prompted on first run. Must be approved manually (cannot be pre-granted by any MDM). After granting, a **logout/login or app restart** is required for the permission to take effect.
* **Browser URL Reading** -- prompted when a browser is first used. This permission is not skippable and cannot be granted beforehand without PPPC.

### Post-Installation Notes

* Stealth mode does not display a visible application or dock icon.
* The app will not automatically start until a lock/unlock cycle is performed. A restart is recommended.
* When **uninstalling** on macOS, a **system restart** is required.
* Consider clearing browser download history on the target machine if confidentiality is required.

## Install Locations (Reference)

| Item           | Path                                              |
| -------------- | ------------------------------------------------- |
| Application    | `/usr/local/zs/zs.app`                            |
| Version file   | `/usr/local/zs/zs.app/Contents/MacOS/version.txt` |
| Launch agent   | `/Library/LaunchAgents/ai.zs.zs.plist`            |
| Updater daemon | `/Library/LaunchDaemons/ai.zs.zs-updater.plist`   |
| Process name   | `zs`                                              |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.we360.ai/deployment-and-it-ops/agent-deployment-hub/manual-installation/macos-stealth.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.