This article covers the installation process for CrowdStrike Falcon Sensor.
Not applicable
Click Windows, macOS, or Linux for the installation process.
CrowdStrike Falcon Sensor can be installed on Windows through the:
Click the appropriate method for more information.
Switch | Required | Purpose |
---|---|---|
/install |
Yes | Installs the CrowdStrike Falcon Sensor. |
/passive |
No | The installer shows a minimal UI with no prompts. |
/quiet |
No | Suppresses UI and prompts. |
/norestart |
No | Prevents the host from restarting after installation. |
/log |
No | Changes the default installation log directory from %Temp% to a new location. The new location must be contained in quotation marks (""). |
Parameter | Value | Required | Purpose |
---|---|---|---|
CID= |
See Examples1 | Yes | Uses customer identification (CID) to associate sensor to CrowdStrike Falcon Console. |
NO_START= |
0 (Default) | No | Starts the sensor immediately after installation. |
1 | Prevents the sensor from starting after installation. The next time the host boots, the sensor is assigned an agent ID (AID). | ||
VDI= |
1 | No | Configures sensor for a virtual desktop infrastructure (VDI) environment. Updates AID after system initialization. |
APP_PROXYNAME= |
See Examples | No | Configures sensor to use a proxy connection. Cannot be used with PACURL . |
APP_PROXYPORT= |
See Examples | No | Specifies APP_PROXYNAME port. |
PACURL= |
See Examples | No | Configures a proxy connection using a PAC file. Cannot be used with either APP_PROXYNAME or APP_PROXYPORT . |
PROXYDISABLE= |
0 (Default) | No | Attempts to connect to CrowdStrike Falcon Console using any available proxy connections. |
1 | The parameter ignores any automatic proxy connection. | ||
ProvNoWait= |
0 (Default) | No | The parameter uninstalls the sensor if unable to connect to CrowdStrike Falcon Console within 10 minutes. |
1 | The parameter prevents uninstall if unable to connect to CrowdStrike Falcon Console. |
1Reference How to Obtain the CrowdStrike Customer Identification (CID) for more information.
CLI Installation Examples:
Example #1:
WindowsSensor.exe /install NO_START=1 CID=ABCDEF123GHI-J6
Example #1 contains:
ABCDEF123GHI-J6
%TEMP%
Example #2:
WindowsSensor.exe /install NO_START=1 /quiet /norestart ProvNoWait=1 CID=ABCDEF123GHI-J6 /log "C:\Logs"
Example #2 contains:
ABCDEF123GHI-J6
C:\Logs
Example #3:
WindowsSensor.exe /install VDI=1 NO_START=1 APP_PROXYNAME=proxy.domain.com APP_PROXYPORT=1234 ProvNoWait=1 PROXYDISABLE=1 /quiet CID=ABCDEF123GHI-J6
Example #3 contains:
ABCDEF123GHI-J6
proxy.domain.com/1234
%TEMP%
sudo installer -verboseR -package [INSTALLPATH]/FalconSensorMacOS.pkg -target /
and then press Enter.[INSTALLPATH]
= The directory where the installer is locatedsudo /Library/CS/falconctl license 'CID'
and then press Enter.'CID'
= The Customer Identification that has been collected from the CrowdStrike Falcon ConsoleClick Red Hat Enterprise Linux, CentOS, Amazon Linux, Ubuntu, or SLES for the steps to install CrowdStrike Falcon Sensor.
CrowdStrike Falcon Sensor must be installed using Terminal on Linux.
sudo yum install falcon-sensor-[VERSION].[EXT]
and then press Enter.[VERSION]
= The version of the CrowdStrike Falcon Sensor installer file[EXT]
= The extension of the CrowdStrike Falcon Sensor installer file
sudo /opt/CrowdStrike/falconctl -s –cid=[CID]
and then press Enter.[CID]
= Customer Identification for CrowdStrike Falcon Console[CID]
is only present on installers that are downloaded from Google Chrome.SysVinit
: service falcon-sensor start
and then press Enter.Systemd
: systemctl start falcon-sensor
and then press Enter.CrowdStrike Falcon Sensor must be installed using Terminal on Linux.
sudo dpkg -i falcon-sensor-[VERSION].[EXT]
and then press Enter.[VERSION]
= The version of the CrowdStrike Falcon Sensor installer file[EXT]
= The extension of the CrowdStrike Falcon Sensor installer file
sudo /opt/CrowdStrike/falconctl -s –cid=[CID]
and then press Enter.[CID]
= Customer Identification for CrowdStrike Falcon Console[CID]
is only present on installers that are downloaded from Google Chrome.SysVinit
: service falcon-sensor start
and then press Enter.Systemd
: systemctl start falcon-sensor
and then press Enter.CrowdStrike Falcon Sensor must be installed using Terminal on Linux.
sudo zypper install falcon-sensor-[VERSION].[EXT]
and then press Enter.[VERSION]
= The version of the CrowdStrike Falcon Sensor installer file[EXT]
= The extension of the CrowdStrike Falcon Sensor installer file
sudo /opt/CrowdStrike/falconctl -s –cid=[CID]
and then press Enter.[CID]
= Customer Identification for CrowdStrike Falcon Console[CID]
is only present on installers that are downloaded from Google Chrome.SysVinit
: service falcon-sensor start
and then press Enter.Systemd
: systemctl start falcon-sensor
and then press Enter.To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.