The endpoint agent installer in the Nebula console contains an account token, which links an endpoint to a specific account. If you manage multiple Nebula accounts, you may prefer to use a generic installer.
A generic installer is the latest installer binary without an account token embedded. Using a command line script, the account token can be applied during or after installation. If an account token is not supplied, the endpoint will not register to a Nebula console and the machine will be unprotected.
Generic Nebula public installers
Download a generic endpoint installer from a public download link below:
| Installer | Link |
| Windows 64-bit MSI | https://ark.mwbsys.com/epa.win.installer.x64/release |
| Windows 32-bit MSI | https://ark.mwbsys.com/epa.win.installer/release |
| Windows ARM MSI | https://ark.mwbsys.com/epa2.win.installer.a64/release |
Locating account token
To use a generic installer, you need to supply an account token. To locate the account token for your Nebula account:
- Log in to Nebula.
- On the left navigation menu, go to Download Center > Advanced tools.
- Click Specify group assignment.
- Locate the command line for the macOS installer.
- The account token appears in the macOS pkg file name
Setup.MBEndpointAgent__xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx___.pkg
Assign account token during installation
Run the corresponding command line script to apply a specific account token to the installer.
CAUTION - A valid account token must be supplied, or endpoint registration fails.
| Operating System | Command line script |
| Windows 32-bit MSI Endpoint Agent Installer |
Setup.MBEndpointAgent.msi NEBULA_ACCOUNTTOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx |
| Windows 64-bit MSI Endpoint Agent Installer |
Setup.MBEndpointAgent.x64.msi NEBULA_ACCOUNTTOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx |
| Windows ARM MSI Endpoint Agent Installer |
Setup.MBEndpointAgent.ARM64.msi NEBULA_ACCOUNTTOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx |
Assign account token after installation
If the generic endpoint agent installer was executed without an account token, run the corresponding command line script to set the account token.
| Operating System | Command line script |
| Windows |
C:\Program Files\Malwarebytes Endpoint Agent\UserAgent>EACmd.exe --changeaccounttoken=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
PowerShell Installer Example
New-Item -Path "C:\" -Name "ThreatDownInstall" -ItemType "directory"
Invoke-WebRequest -URI " https://ark.mwbsys.com/epa.win.installer.x64/release" -Outfile "C:\ThreatDownInstall\ThreatDownEA.msi"
$pkg = "C:\ThreatDownInstall\ThreatDownEA.msi"
$token = "EnterYourTokenHere"
Start-Process msiexec.exe -ArgumentList "/i $pkg NEBULA_ACCOUNTTOKEN=$token /qn"