---
title: "Downloading and Installing the Agent and Certificates"
slug: "downloading-the-agent"
tags: ["Enterprise", "Essentials", "Premium"]
updated: 2026-06-15T07:52:25Z
published: 2026-06-15T07:52:25Z
canonical: "support.perimeter81.com/downloading-the-agent"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.perimeter81.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Downloading and Installing the Agent and Certificates

## Prerequisites

- Network connectivity to required  SASE Agent service URLs.
- Firewall access for required inbound and outbound traffic.
- Open ports based on the configured VPN protocol and tenant region.

For the complete list of required URLs, ports, and protocol details, see[sk182251](https://support.checkpoint.com/results/sk/sk182251).

In the **Downloads** page, you can download the Check Point SASE Agent and Certificate.

To view the **Downloads** page, access the Check Point SASE Administrator Portal and click **Devices** > **Downloads**.![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DownloadsNew.png)

Note - The version available here may be newer than the default version for some customers, while a gradual rollout is underway.Notes -

- For the latest SASE Agent versions, see [sk182466](https://support.checkpoint.com/results/sk/sk182466).
- The SASE Agent is supported on devices with ARM processor in Private Access mode only.

### Downloading the Check Point SASE Agent

1. Access the Check Point SASE Administrator Portal and click **Devices**> **Downloads**.
2. Click the **Agents**tab.  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DownloadsLead.PNG)
3. Do one of these:
  - Click **Download**.  
The system downloads the file.

| Operating System | Download |
| --- | --- |
| MacOS ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1676801998986.png) macOS 13 or later | <meta charset="utf-8">[PKG](https://static.perimeter81.com/agents/mac/Harmony_SASE_12.8.0.10616.pkg) |
| Windows ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1676801884220.png)Windows 11 | **Recommended:** - [EXE](https://static.perimeter81.com/agents/windows/Harmony_SASE_12.9.0.16343.exe) - [MSI (for mass deployment)](https://static.perimeter81.com/agents/windows/Harmony_SASE_12.9.0.16343.msi) **Stable****:** - [EXE](https://static.perimeter81.com/agents/windows/Harmony_SASE_12.7.4.14246.exe) - [MSI (for mass deployment)](https://static.perimeter81.com/agents/windows/Harmony_SASE_12.7.4.14246.msi) **ARM (Supports Private Access mode only):** - [EXE](https://static.perimeter81.com/agents/windows/Harmony_SASE_12.8.0.14443_arm64.exe) - [MSI (for mass deployment)](https://static.perimeter81.com/agents/windows/Harmony_SASE_12.8.0.14443_arm64.msi) |
| Linux ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1676802034435.png)Ubuntu 20.04 or later Redhat 8 or later Fedora 40 or later Linux 8 or later | - [Deb](https://static.perimeter81.com/agents/linux/Perimeter81_10.1.0.53.deb) - [RPM](https://static.perimeter81.com/agents/linux/Perimeter81_10.1.0.53.rpm) \ [RPM (Fedora)](https://static.perimeter81.com/agents/linux/Perimeter81_10.1.0.53-fedora.rpm) - [tar.xz](https://static.perimeter81.com/agents/linux/Perimeter81_10.1.0.53.tar.xz) |
| iOS ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1676802060675.png)iOS 15 or later | [App Store](https://itunes.apple.com/us/app/perimeter-81/id1307953381?mt=8) |
| Android / Chromebook ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1676802120541.png)Android 12.1 or later | [Google Play](https://play.google.com/store/apps/details?id=com.perimeter81.android) |
  - Click **Copy Link** to copy the download link. Share the link with members.
4. To verify that the downloaded file is authentic, use the **Checksum**.
5. [Deploying the Agent Using an MDM Application](/v1/docs/deploy-with-mdm).

### Downloading the Certificate

1. Access the Check Point SASE Administrator Portal and click **Devices**> **Downloads**.
2. Click the **Certificates**tab.  
![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1754465342162.png)
3. Click **Activate** to activate the SWG root certificate.
4. When the certificate is active, click **Download**.  
The system downloads a PEM file.

MDM DeploymentIf the devices in your organization are managed through a central desktop management tool you may prefer [remote installation](/v1/docs/deploy-with-mdm) instead of having team members download and install the agent on their own.Web Security (SWG) - Agents with the Web Security feature enabled requires additional steps to ensure the feature's full functionality. For detailed steps, see [MDM App Deployment](/v1/docs/deploy-with-mdm).