Back to EPM
Endpoint & Device Security

Install the Segura EPM Plugin

Remove local admin rights with one command.

Deploy the Endpoint Privilege Manager agent on Linux, macOS, and Windows. A single installer served over HTTPS from get.epmsegura.cloud detects your platform and applies least privilege in minutes.

Top-rated 4.8/5 on Gartner® Peer Insights

Terminal — bash 
# Download and run the Segura EPM installer
$ curl -fsSL https://get.epmsegura.cloud/install | bash

irm is the alias for Invoke-RestMethod and iex for Invoke-Expression — the PowerShell equivalent of curl | bash. No execution policy change is required. The installer prompts for the enrollment key provided by your Segura administrator.

One URL, every platform: https://get.epmsegura.cloud/install detects your OS and installs the matching agent.

Three steps to a protected endpoint

The installer handles dependencies, configures the agent, and enrolls the endpoint with your Segura platform.

Open a terminal

Windows: open PowerShell as administrator. Linux and macOS: open any shell with sudo privileges.

Run the install command

Paste the curl | bash command — or irm | iex on Windows — and enter your enrollment key when prompted.

Verify the agent

Confirm the service is running with segura-epm --version or Get-Service segura-epm. Policies apply on the next sync.

Before you install

Supported platforms and prerequisites for the EPM agent.

Segura EPM on Linux

Linux & macOS

  • systemd-based distributions: Debian, Ubuntu, RHEL, Rocky, Alma, CentOS, SUSE
  • macOS 12 or newer
  • curl and bash (preinstalled on macOS and most distributions)
  • Root access via sudo
$ curl -fsSL https://get.epmsegura.cloud/install | bash
Segura EPM on Windows

Windows

  • Windows 10, Windows 11, or Windows Server 2016 and newer
  • Windows PowerShell 5.1 or newer
  • Elevated session (run as administrator)
  • No execution policy change needed — the script runs as an expression
PS C:\> irm https://get.epmsegura.cloud/install | iex

Common to every platform

  • Outbound HTTPS (TCP 443) to get.epmsegura.cloud
  • Local administrator (or root) privileges
  • Enrollment key issued by your Segura administrator

Security first: inspect before you run

Piping remote scripts straight into a shell should always be a conscious decision. Download the installer and review it before executing.

Linux & macOS

Download the script, read it with less, then run it locally.

$ curl -fsSL https://get.epmsegura.cloud/install -o epm-install.sh
$ less epm-install.sh
$ bash epm-install.sh

Windows

Save the script to disk, review it in Notepad, then execute it.

PS C:\> irm https://get.epmsegura.cloud/install -OutFile epm-install.ps1
PS C:\> notepad epm-install.ps1
PS C:\> .\epm-install.ps1

Installed. Now confirm it works.

Check the agent version and service status. Privilege policies start applying as soon as the endpoint syncs with your Segura platform.

Linux & macOS

$ segura-epm --version
segura-epm 1.4.0 (endpoint-privilege-manager)
$ sudo systemctl status segura-epm
● segura-epm.service - Segura EPM Agent
     Active: active (running)

Windows

PS C:\> Get-Service segura-epm
Status   Name       DisplayName
------   ----       -----------
Running  segura-epm Segura EPM Agent
Read the Docs Contact Support Explore Segura EPM