> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Bitdefender

> Deploy the Bitdefender GravityZone agent on macOS and Windows devices using Primo MDM.

<Info>
  Bitdefender GravityZone requires **manual setup** before deployment. Download the installation package from the GravityZone console and upload it to Primo. The package already includes your company configuration — no license key needs to be passed in the install script.
</Info>

## How to deploy

<Steps>
  <Step title="Download the installers from GravityZone">
    1. In the GravityZone admin console, go to **Network > Packages**.
    2. Select an existing deployment package or create a new one for each target platform.
    3. Download the macOS (`.pkg`) and Windows (`.exe`) installers.

    The downloaded packages already embed your company credentials and configuration — no additional activation step is needed.
  </Step>

  <Step title="Deploy as Custom Software">
    For each installer (macOS and Windows):

    1. In Primo, go to **MDM > Software > Add app > Custom app**.
    2. Upload the installer file and click **Add software**.

    No changes to the install script are needed — the default script handles installation correctly.
  </Step>

  <Step title="Create a compliance policy (macOS)">
    1. In FleetDM, go to **Policies > Add Policy** and use the query:
       ```sql theme={null}
       SELECT 1 FROM apps WHERE bundle_identifier = 'com.bitdefender.EndpointSecurityforMac';
       ```
    2. Name it **Bitdefender installed (macOS)** and save.
  </Step>

  <Step title="Create a compliance policy (Windows)">
    1. In FleetDM, go to **Policies > Add Policy** and use the query:
       ```sql theme={null}
       SELECT 1 FROM programs WHERE name LIKE '%Bitdefender%';
       ```
    2. Name it **Bitdefender installed (Windows)** and save.
  </Step>

  <Step title="Automate installation">
    Go to **Policies > Manage automations > Software** and assign each policy to its corresponding installer package. Fleet will automatically push the installer to any device that fails the policy check.
  </Step>
</Steps>