The endpoint agent installer in Nebula contains an account token, which links an endpoint to a specific account. If you manage multiple Nebula accounts, you may prefer to use a generic installer.
A generic installer is the latest installer binary without an account token embedded. Using a command line script, the account token can be applied during or after installation. If an account token is not supplied, the endpoint will not register to a Nebula console and the machine will be unprotected.
Generic Nebula public installers
Download a generic endpoint installer from a public download link below:
| Installer | Link |
|---|---|
| Windows 64-bit MSI | https://ark.mwbsys.com/epa2.win.installer.x64/release |
| Windows 32-bit MSI | https://ark.mwbsys.com/epa2.win.installer.x86/release |
| Windows ARM MSI | https://ark.mwbsys.com/epa2.win.installer.a64/release |
Locating account token
To use a generic installer, you need to supply an account token. The account token is provided in the file name of the macOS pkg. To locate the account token for your Nebula account:
- Log in to Nebula.
- On the left navigation menu, go to Download Center > Advanced tools.
- Click Specify group assignment.
- Locate the command line for the macOS file.
- The account token appears in the macOS pkg file name
Setup.MBEndpointAgent__xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx___.pkg
Assign account token during installation
Run the corresponding command line script to apply a specific account token during installation.
CAUTION - A valid account token must be supplied, or endpoint registration fails.
| Operating System | Command line script |
|---|---|
| Windows 32-bit MSI Endpoint Agent Installer | Setup.MBEndpointAgent.msi NEBULA_ACCOUNTTOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx |
| Windows 64-bit MSI Endpoint Agent Installer | Setup.MBEndpointAgent.x64.msi NEBULA_ACCOUNTTOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx |
| Windows ARM MSI Endpoint Agent Installer | Setup.MBEndpointAgent.ARM64.msi NEBULA_ACCOUNTTOKEN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx |
Assign account token after installation
If the generic endpoint agent installer was executed without an account token, run the corresponding command line script to set the account token
C:\Program Files\Malwarebytes Endpoint Agent\UserAgent>EACmd.exe --changeaccounttoken=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxPowerShell Example
New-Item -Path "C:\" -Name "ThreatDownInstall" -ItemType "directory"
Invoke-WebRequest -URI " https://ark.mwbsys.com/epa.win.installer.x64/release" -Outfile "C:\ThreatDownInstall\ThreatDownEA.msi"
$pkg = "C:\ThreatDownInstall\ThreatDownEA.msi"
$token = "EnterYourTokenHere"
Start-Process msiexec.exe -ArgumentList "/i $pkg NEBULA_ACCOUNTTOKEN=$token /qn"