Skip to Main Content
Patch My PC Feature and Application Request

A community where customers and the community can provide feedback to make a better product for everyone! For more details on how we prioritize request, please see:

Crowdstrike Falcon installer

Will be useful as there will be frequent updates.

  • Attach files
      Drop here to upload
    • Madison Gerber
      Reply
      |
      Aug 2, 2024

      Please reach out to Crowdstrike and perhaps as a partner they will give you access to sensor builds and documentation. The sensor package just needs to know each customer's unique CID for initial install and the bulk maintenance token for upgrades.

      Automatic installation

      To automate silent installations on many devices, including installations using a deployment tool such as Windows System Center Configuration Manager (SCCM), complete these steps.

      1. Use Google Chrome to download the sensor installer from Host setup and management > Deploy > Sensor downloads.

      2. Copy your customer ID checksum (CCID) from Host setup and management > Deploy > Sensor downloads.

      3. Run or configure your deployment tool to use this command, replacing <installer_filename> with the name of the install file you downloaded, and <CCID> with the CCID from step 2 :

        <installer_filename> /install /quiet /norestart CID=<CCID>

      For information about these parameters and their functions, see Appendix A.

      Sensor upgrades with uninstall protection enabled and cloud updates disabled

      Use this upgrade path if you don’t use cloud updates and want to automate silent sensor upgrades on uninstall-protected devices. You might manage installations using a deployment tool like Windows System Center Configuration Manager (SCCM).

      1. Use Google Chrome to download the sensor installer from Host setup and management > Deploy > Sensor downloads.

      2. In the sensor update policy you want to update, turn on Bulk maintenance mode. Make sure the Sensor version updates off build version is selected and Uninstall and maintenance protection is turned on.

      3. Retrieve the bulk maintenance token to include in the deployment package. This token doesn't change, so you don't need to modify your deployment package each time you enter bulk maintenance mode.

      4. Run or configure your deployment tool to use this command, replacing<installer_filename> with the name of the install file you downloaded:

        <installer_filename> MAINTENANCE_TOKEN=<bulk maintenance token> /install /quiet /norestart

      5. For increased security, turn off bulk maintenance mode after completing your upgrades. This restores the per-sensor maintenance token and disables the bulk maintenance token.

      Appendix A: Installer parameters

      This is a complete index of all parameters that the Falcon sensor installer accepts.

      Note: Enter the parameters exactly as shown.

      • All installer parameters are case-sensitive.

      • Some parameters require a leading slash, and some require no leading slash.

      Installation parameters

      Parameter

      Description

      CID=0123456789ABCDEFGHIJKLMNOPQRSTUV-WX

      Your Customer ID Checksum, which is required when installing.

      /install

      Installs the sensor (default).

      /passive

      Shows a minimal UI with no prompts.

      /quiet

      Shows no UI and no prompts.

      /norestart

      Prevents the host from restarting at the end of the sensor installation.

      GROUPING_TAGS=

      Assigns user-selected identifiers you can use to group and filter hosts.

      ProvToken=

      Optional security measure to prevent unauthorized hosts from being accidentally or maliciously added to your customer ID (CID).

      BILLINGTYPE=

      Sets the sensor to use standard billing or Pay-As-You-Go billing.

      • BILLINGTYPE=Default: standard billing per sensor

      • BILLINGTYPE=Metered: Pay-As-You-Go billing

      Sensor startup parameters

      Parameter

      Description

      NO_START=1

      Prevents the sensor from starting up after installation. The next time the host boots, the sensor will start and be assigned a new agent ID (AID). This parameter is usually used when preparing master images for cloning.

      VDI=1

      Enable virtual desktop infrastructure mode.

      Proxy parameters

      Parameter

      Description

      Usage

      APP_PROXYNAME=<Proxy FQDN or IP>

      APP_PROXYPORT=<Proxy server port>

      Configure a proxy connection using both a proxy address (by FQDN or IP) and a proxy port.

      Cannot be used with the PACURL parameter.

      PACURL=<PAC file URL>

      Configure a proxy connection using a PAC file.

      Cannot be used with the APP_PROXYNAME and APP_PROXYPORT parameters.

      PROXYDISABLE=1

      By default, the Falcon sensor for Windows automatically attempts to use any available proxy connections when it connects to the CrowdStrike cloud. This parameter forces the sensor to skip those attempts and ignore any proxy configuration, including Windows Proxy Auto Detection.


      ProvNoWait=1

      The sensor does not abort installation if it can't connect to the CrowdStrike cloud within 20 minutes (10 minutes, in Falcon sensor version 6.21 and earlier). (By default, if the host can't contact our cloud, it will retry the connection for 20 minutes. After that, the host will automatically uninstall its sensor.)

      Use this parameter when upgrading to version 3.5 or later if you use IE proxy detection for Falcon, because proxy data will not be available until another user logs into the host.

      ProvWaitTime=3600000

      The sensor waits for 1 hour to connect to the CrowdStrike cloud when installing (the default is 20 minutes).

      Use this to install the sensor on hosts that require more time to connect to the CrowdStrike cloud.

      In Windows sensor version 6.22 and later, this parameter is usually only used by request from our Support team. It’s typically not needed because the sensor can complete installation even if all channel files can’t be downloaded.

      Troubleshooting parameters

      Troubleshooting parameters

      Description

      /?

      Show help information for the installer.

      /repair

      Repair the sensor installation.

      /log log.txt

      Change the log directory to the specified file.

      MAINTENANCE_TOKEN

      An optional single-use security token used when uninstalling or installing sensors.

    • Admin
      Jason Bergner
      Reply
      |
      Aug 1, 2024

      Apps without public download URLs or are behind a paywall or login present challenges for us at PMPC as we don't always have access to the downloads. This particular app may be better suited for our Custom Apps feature.

    • Claudio Mendes
      Reply
      |
      Jul 23, 2024

      push push push lol

    • Trevor Jones
      Reply
      |
      Mar 8, 2024

      Please please please :)

    • Aaron T
      Reply
      |
      Mar 7, 2024

      Yes, please! The frequent updates to this app really do cause a struggle.
      The unique company CID is a command line parameter at install time, so it would be added in the console.

    • Bruce Sa
      Reply
      |
      Jun 3, 2023

      This is a simple MSI install that all paremeters get passed to. Utilizing the current deployment methods PMPC has in place right now would work 100%.

      Ps. The only part that work work for it is the uninstall, as this you would need a unique code per machine.

    • Brandon Adams
      Reply
      |
      Apr 26, 2023

      Bump

    • Therese Reyes
      Reply
      |
      Jan 11, 2023

      Just curious, the install for the CS agent has a unique code tied to firm account. I am not sure if having installation package will work without that code. The version update may be more useful as long as it doesn't override the firm code.

    • Guest
      Reply
      |
      Jan 3, 2023

      We can also provide installation scripts we currently use and validate it on SCCM and InTune. We currrently push it out via InTune.

    • Alexander Kopetman
      Reply
      |
      Oct 19, 2022

      Hi. It would really help us out if you can add CrowdStrike Falcon Sensor to ConfigMgr Apps deployment. We use SCCM to deploy applications, but CrowdStrike does not have .MSI instructions, only .exe. We can provide anything you need from CrowdStrike (latest sensor download, instructions, etc.) Thanks

    • Brandon Adams
      Reply
      |
      Sep 28, 2022

      Any update on this?

    • Brandon Adams
      Reply
      |
      Sep 21, 2022

      What if one of us provided you with the EXE file?

    • Adam Gell
      Reply
      |
      Sep 8, 2022

      Can this be possible with the local content repo?


    • Madison Gerber
      Reply
      |
      Jul 26, 2022

      Hi Adam, I have a CrowdStrike contact for you if you would like to work directly with them. Please message me.

      Here is the idea I posted on Crowdstrike's portal https://eu-1.ideas.crowdstrike.com/ideas/IDEA-I-7811

    • Madison Gerber
      Reply
      |
      Jun 22, 2022

      Hi Adam, I have opened a case with Crowdstrike if you would like to provide Patch My PC contact info I will push to reach out to you and work on this.

    • Admin
      Adam Cook
      Reply
      |
      Jun 13, 2022

      Just to give you all an update, we're currently trying to source the software from the vendor. Unfortunately so far they haven't been very cooperative but we will keep trying.

    • Ben Lee
      Reply
      |
      Mar 3, 2022

      Also will not work if write protection is enabled

    • Chris Kibble
      Reply
      |
      Feb 1, 2022

      Upvoting because the console does a poor job of updating from older versions, and because sometimes it straight up fails to update. The folks who run the updates, I suspect, are often different than those who manage the Falcon console.

    • Tyler Webb
      Reply
      |
      Nov 9, 2021

      But you still have to do the initial deployment. Having it built and updating the installer automatically would be a nice improvement.

    • Guest
      Reply
      |
      Sep 9, 2021

      what Rob Gura said.

    • Load older comments
    • +195
    1 VOTE

    Crowdstrike Falcon Sensor

    Enabling auto updates Crowdstrike Falcon Sensor
    ashik karki about 2 months ago in Application Request (Windows) 0 NOTED
    47 VOTE

    Add CrowdStrike Falcon Windows Sensor

    We use PatchMyPC integration with ConfigMgr for Windows servers as well as workstations. We are looking at using this automation to always have the latest version of CrowdStrike Falcon antivirus to install on new machines as they come online so th...
    Guest over 2 years ago in Application Request (Windows) 0 NOTED