Deploy the agent
Choose how to install Lodestar on a client's devices.
Lodestar runs a small agent on each device. The agent enrols into one client in the console, then reports every day. On Macs and Windows PCs it keeps itself up to date.
Supported devices
| Platform | Requirement |
|---|---|
| Mac | macOS 15 or later |
| Windows | Windows 10 or 11, 64-bit |
| Linux | Not available yet |
Choose a method
When you add a client, the console asks how you will deploy, then shows the steps with the client's values filled in.
For a client you already have, open it, then the Enrolment tab. Select New enrolment token and create the token. The console then shows the same steps: choose Macs or Windows PCs, then how you deploy software.
| Method | Best for |
|---|---|
| One-line install | One device, or a handful, without an RMM. The quickest way to try Lodestar on a first device. |
| Intune or JumpCloud | Clients with an MDM. On Macs, the only way to approve the network monitor silently. |
| Datto RMM | Clients managed in Datto RMM. |
| Other RMMs | N-able N-central or N-sight, ConnectWise Automate or RMM, NinjaOne, or any RMM that runs scripts. |
| By hand | Installing from the installer file yourself. |
What you need
- The console address:
https://console.lodestarapp.ai. The console fills it in for you. Devices enrolled with the earlier address,https://lodestar.panoptic.tools, keep working. They need no change. - An enrolment token for the client. See Enrol devices. Use one token per client and per tool, labelled after the tool, so you can revoke one without affecting the others.
- Network access. Devices reach the console and
https://downloads.lodestarapp.aiover HTTPS. The agent refuses a console address that does not start withhttps://.
Never use one client's token for another client. Devices join whichever client the token belongs to.
Macs and the network monitor
On a Mac, Lodestar's network monitor needs approval. An MDM profile approves it silently. Without one, the Mac still reports installed AI tools, but network use only starts once someone approves the monitor. See The Mac network monitor.
Check a device enrolled
The device appears on the client's Devices tab after its first report, usually a few minutes after enrolling. If it does not, see Troubleshooting.