Enable Users to Install the JumpCloud Agent

This feature lets end users remotely install the JumpCloud agent on devices sent to them from your org so that you can easily add their devices to your JumpCloud-managed device fleet. 

You can bind macOS, Windows, and Linux devices to JumpCloud using our device agent. You can also enable remote install of the JumpCloud agent from the User Portal for all users in your org. This install method allows new hires or existing employees receiving new devices to install the current agent for their device from a remote location. After users download and install the agent on their device, Admins are notified that a new device has come online and is now available to be bound to the JumpCloud user in the Admin Portal.

Prerequisites:

• The JumpCloud agent can only be installed on supported devices that meet JumpCloud’s device requirements. See Agent Compatibility, Device Requirements, and Impacts to learn more.
• For macOS devices on version 11.0 or later, a local JumpCloud Service Account is created. During install, credentials for a SecureToken-enabled user are required for support with SecureToken in conjunction with FileVault. See Install and Use the Service Account for MacOS to learn more.
• Users need Admin level access on their device to install the JumpCloud agent. See Admin Portal Roles to learn more.
• JumpCloud agent install requires a connect key. This key is generated from the User Portal and is pasted into the install wizard for macOS & Windows installations. Linux users paste the connect key into their terminal window as a part of the installation command. See the Remote Agent Installation Flow section below.

Considerations:

• Users can install the agent from any device that they can access their User Portal from. Ensure that your users only install the agent on devices that your org wants to manage through JumpCloud.
• MacOS users that don’t have a SecureToken may require additional support. We recommend that if you know a macOS user who doesn’t have a SecureToken, see Install and Use the Service Account for MacOS to learn more.
• After the agent is installed on a user’s device, Admins need to bind the JumpCloud user to the device in the Admin Portal for the JumpCloud agent to start managing the device for the user. You can bind users who have self-installed the agent from the Devices list. See Bind Users to Devices to learn more.  
• If a user installs the agent on a device that already has the agent installed, JumpCloud upgrades the agent to the downloaded version. Emails aren’t sent to the Admin if a user upgrades their device’s agent. 
• Currently, we don’t provide any error notifications to the Admin if a user’s install fails. 
• Educate your users about remote install before you enable this functionality for your org. See the Educating Your Users About Remote Agent Installation section below.

Remote Agent Installation Flow

1. A JumpCloud Admin educates their org users about their upcoming enablement of remote agent installs.
2. The Admin enables remote agent install for their org.
3. The User Portal Security page shows the JumpCloud Agent section with the current agent for each operating device.
4. The Admin requests a user to download and install the agent on their device.
5. The JumpCloud user logs into their User Portal and goes to the Security page to download the agent, and follows the OS-specific install instructions in the User Portal. See Install the JumpCloud Agent from the User Portal to learn more.  
6. After the user successfully installs the agent, all org Admins receive an email that a new device has come online for the JumpCloud user and can now be bound to that user in the Admin Portal. This email includes the device’s hostname. 
7. The Device list shows information about the device including the device’s name and who installed the agent. From here, Admins can bind users to their devices.

Enabling Remote Agent Installation for Your Organization

To enable remote agent install for your org:

1. Log in to the JumpCloud Admin Portal.
2. In the left menu, go to Settings.
3. Under the Organization Profile tab, scroll to User Portal Settings and select Allow all users to enroll devices through the User Portal.
   
4. Click Save.

After you enable remote agent install, the User Portal's Security page shows the JumpCloud Agent section.

Educating Your Users About Remote Agent Installation

Before you enable remote agent install from the User Portal, you should educate your users about this functionality.

We recommend that you:

• Tell users about the new JumpCloud Agent section they’ll see in their User Portal after you enable the feature.
• Tell users not to install the agent unless you explicitly ask them to install it on their device.
• Tell your users not to install the agent on personal computers or other devices you don’t intend to manage through JumpCloud.
• When you ask users to install the agent on their device, send them this help article with your request: Install the Agent from the User Portal.

Remote Agent Install End User Email Template

You can use the following email template to send to your users before you turn on this feature for your org to help them understand the upcoming change in their User Portal.

Hello everyone,

This week {adjust as needed} we're enabling functionality to allow our employees to install the JumpCloud agent on their work computers from the JumpCloud User Portal. After we enable this feature, you'll see a new section in your User Portal's Security page for the JumpCloud agent.

What is the JumpCloud agent? 

The JumpCloud agent is an application that facilitates communication between JumpCloud and your computer, while keeping your IT admins informed about your computer's health and status. Your admins can update your computer through the agent as needed to keep your computer running safely, and smoothly.

Some important things to know about the new JumpCloud agent section in your User Portal:

You don’t need to do anything unless we ask you to. Please don’t install the agent on your computer unless we ask you to.

If we ask you to install the agent on your computer, we’ll send you more information on how to do that for your specific operating device. 

Reach out if you have any questions about any of this.

Thanks, 

Additional Resources:

Knowledge Base: Troubleshoot: JumpCloud Agent

Show Me: Enabling User Agent Installs Tutorial

Enroll: Troubleshooting the JumpCloud Agent