Setting Up Remote Access on macOS

Satyam

Last Update 14 hari yang lalu

SecOps Solution's Remote Access lets administrators securely access a macOS device directly from the SecOps Solution platform , no VPN or inbound firewall rules required. This article walks through the steps required during agent installation to enable remote access on macOS.

Prerequisites

  1. macOS 12.3 (Monterey) or later
  2. Apple Silicon (M1/M2/M3) or Intel Mac
  3. The SecOps Solution agent installer package from platform
  4. The installer must be run from a local Terminal window on the Mac itself. Running it over SSH is not supported for the remote access setup step, macOS requires a direct GUI session to display permission prompts correctly.

What the Installer Does

During installation, the installer automatically handles all binary setup and configuration. The only manual step required from you is granting two macOS privacy permissions when the installer opens System Settings and prompts you to do so.


Step 1 : Grant Screen Recording Permission

When the installer reaches the remote access setup step, it will automatically open:


System Settings → Privacy & Security → Screen Recording

  1. Locate SecOpsMacAgentScreenCapture in the list.
  2. Toggle it ON.
  3. If it does not appear in the list, click +, navigate to /opt/SecOpsAgent/SecOpsMacAgentScreenCapture, and click Open — then toggle it ON.
  4. Return to the Terminal and press Enter to continue.

Important: If you previously installed the SecOps agent and see an existing SecOpsMacAgentScreenCapture entry, remove it with  first and re-add with + before toggling ON. This ensures the permission is bound to the current binary.


Step 2 : Grant Accessibility Permission


Immediately after Screen Recording, the installer opens:

System Settings → Privacy & Security → Accessibility

  1. Click +, navigate to /opt/SecOpsAgent/SecOpsMacAgentScreenCapture, and click Open.
  2. Toggle it ON.
  3. Return to the Terminal and press Enter to continue.

Once both permissions are confirmed, the installer completes the setup and the remote access agent is ready.


Firewall and Network Requirements

The SecOps agent connects outbound only, no inbound ports need to be opened on the Mac or your firewall.

Ensure the Mac can reach the following destinations:

DestinationPortProtocol
api.app.secopsolution.com 443TCP (HTTPS)
rda.secopsolution.com 13903 TCP
rda.secopsolution.com 13903 TCP

 

If your network enforces outbound firewall rules or uses a web proxy, add the above entries to your allowlist. For proxy configuration, the installer will prompt you to enter a proxy URL if required.



Troubleshooting


Screen shows a blank or frozen image after connecting :

Screen Recording permission was not granted, or the toggle was applied to an old binary entry. Open System Settings → Privacy & Security → Screen Recording, remove any existing SecOpsMacAgentScreenCapture entry, re-add the binary from /opt/SecOpsAgent/, toggle it ON, then restart the agent.

Mouse and keyboard input have no effect :

Accessibility permission is missing. Open System Settings → Privacy & Security → Accessibility and follow the same add-and-toggle steps above.

System Settings permission prompts never appeared during installation:

The installer was likely run over SSH. The macOS permission dialog must be triggered from a local GUI session. Re-run the installer directly in a Terminal window opened on the Mac.

Remote access is unavailable after macOS upgrade :

Major macOS upgrades can reset privacy permissions. Re-run the installer or manually re-grant Screen Recording and Accessibility in System Settings as described above.

Connection fails, cannot reach the platform :

Verify that outbound TCP on ports 443 and 13903 to rda.secopsolution.com is not blocked by a firewall or proxy. Run the domain connectivity check included with the installer to confirm reachability.





 

Was this article helpful?

0 out of 0 liked this article

Still need help? Message Us