Other RMMs
Deploy Lodestar with N-able, ConnectWise, NinjaOne or any RMM that runs scripts.
Any RMM that can run a script as SYSTEM (Windows) or root (macOS) can deploy Lodestar. Download the script from the steps the console shows for your RMM:
| Script | Platform | Runs as |
|---|---|---|
install-lodestar-windows.ps1 | Windows | SYSTEM, as PowerShell |
install-lodestar-macos.sh | macOS | root, as Bash |
Give the script the console address and the client's token, as parameters or as variables:
| Setting | Variable | Windows | macOS |
|---|---|---|---|
| Console address | LodestarServer | -Server | --server |
| Enrolment token | LodestarToken | -Token | --token |
| Installer address (optional) | LODESTAR_PACKAGE_URL | -PackageUrl | --package-url |
| Installer checksum (optional) | LODESTAR_PACKAGE_SHA256 | -Sha256 | --sha256 |
Store the token in a per-client field where your RMM has one, so one script serves every client.
Schedule the script so new devices are picked up. Devices that are already enrolled keep their enrolment. With agent updates on, they usually update themselves before the script runs again. The script upgrades any that have not.
Menu names below come from each vendor's documentation. Check them against your version.
N-able N-central
Go to Configuration > Scheduled Tasks > Script/Software Repository and add a Scripting item with the script.
Create a scheduled task that runs it on the customer's devices, with the parameters the console shows. For example, on Windows: -Server https://console.lodestarapp.ai -Token <token>.
Repeat the task, or add it to an Automation Manager policy, to pick up new devices.
N-able N-sight RMM
Go to Settings > Script Manager and add the script.
Add it to the client's devices as an Automated Task, with the parameters the console shows.
ConnectWise Automate
Create a client-level Extra Data Field named Lodestar Token, and fill it in for each client.
Create a script that reads the field into @LodestarToken@, then runs install-lodestar-windows.ps1 -Server https://console.lodestarapp.ai -Token @LodestarToken@.
Schedule it on a group, for example "Windows workstations without Lodestar".
Automate's macOS support is limited. Use your MDM for Macs.
ConnectWise RMM
In Automation, create a script with the PowerShell or Bash script.
Add parameters for the server and token, or read the token from a company custom field.
Run it on the company's devices, and schedule it for new ones.
NinjaOne
Go to Administration > Library > Automation and add the script: PowerShell for Windows, ShellScript for macOS.
Pass the values as preset parameters, or read the token from an organisation custom field.
Add it to the organisation's policy as a scheduled script.
Hold devices on one version
By default the script installs the current release. To hold a version:
Switch off agent updates, so devices stop updating themselves.
Attach the installer to the script, or give its address and SHA-256 checksum.
The script still checks the signature. On a Mac it installs only a package signed by Panoptic and notarised by Apple. On Windows it installs only an installer with a valid signature.
Hold before devices move past that version. On Windows, the installer refuses to replace a newer version, and the script ends with exit code 2.
Macs
An RMM cannot approve the Mac network monitor. See The Mac network monitor.