{"version":"2.1.300","anchor":"cowork-edr-integration-admin-keys-added","canonical_anchor":"cowork-edr-integration-admin-keys-added","heading":"Admins can install an endpoint security package into the Cowork workspace","tier":"use","area":"Managed Settings","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cowork-edr-integration-admin-keys-added","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300","markdown":"### Admins can install an endpoint security package into the Cowork workspace\n\nTwo new admin settings let organizations supply a signed security vendor package that the Cowork workspace installs as root when it starts, on macOS\n\n**What**\n\nTwo new settings for administrators, `coworkEDRIntegration` and `coworkEDRIntegrationVendor`, let an organization supply a signed package from an EDR vendor (endpoint detection and response, security software that watches a machine for threats). When the Cowork workspace virtual machine starts, it runs the package's `install.sh` as root, the all-powerful system account.\n\nThe settings:\n\n- work on macOS only\n\n- are read only from device management, the system organizations use to configure company computers\n\n**Why**\n\nOrganizations that require security monitoring on every machine can now extend it into the Cowork workspace. Because the install script runs as root, only the signed package an administrator provides through device management is used.\n\n- Area: Managed Settings\n- Names: `coworkEDRIntegration`, `coworkEDRIntegrationVendor`\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 3\/5\n- Scope: org\n- Heads-up: no"}