This flow details how to deploy the Cortex XDR agent on macOS 15 Sequoia endpoints using the Palo Alto Networks system extensions configuration file.
When applying the configuration profile on older OS versions, and then upgrading to macOS 15 Sequoia, some fields may not be propagated properly due to known macOS issue. We recommend creating a smart/dynamic group of machines running macOS 15 Sequoia, and applying this profile only to this group.
If this has not been done previously, follow the instructions for installing the unified configuration profile to your MDM tool. Install with a unified configuration profile for MDMs
Download the signed or unsigned system extensions configuration profile.
Download the signed configuration profile (CortexXDR_SystemExtensionsSequoia_V1_SignedPANW.mobileconfig)
SHA256: 35796ab146072f9beef9fc0398d567cba23432244ff38268124b16aa000ab148
MD5: e354fb7dcf7e17fe21982f3974537e61
Download the unsigned configuration profile (CortexXDR_SystemExtensionsSequoia_V1_SignedPANW.mobileconfig)
SHA256: f852abf35b525bc4eb25ad05b4590980c72ebfc623eeeda958f4e32cabcf9941
MD5: 66aaf5535d5eba67ef8df9f2bf28980a
Create a smart/dynamic group of machines running macOS 15 Sequoia in your organization.
Upload/install the profile, and add this smart group to the profile’s targets.