How to install Device Monitor?

Overview

This article explains how to set up the Kawach Device Monitor tool to enable continuous visibility into device security and compliance. Once installed, Kawach can monitor device posture in near real time and surface relevant findings as part of your compliance and risk workflows.

This capability helps ensure that employee devices meet baseline security requirements and that device-level evidence is consistently available for audits, reviews, and internal assessments.

Prerequisites

Before starting the setup, ensure the following:

You have access to your organization's iOS or Windows device where the Device Monitor will be installed.
You have permission to install applications on the device.
You have access to your organization’s Kawach Employee account or Microsoft/Apple store .
The device is assigned to a user in Kawach for accurate device-to-person mapping.

What Kawach Accesses

Kawach Device Monitoring operates in a read-only posture assessment mode. It does not modify system settings or configurations on the device.

Once installed, Kawach can:

Verify disk encryption status
Check whether screen lock is enabled
Validate that the device operating system is up to date
Confirm device-to-person mapping
Verify antivirus presence and functionality

Steps to Set Up Kawach Device Monitoring

Step 1: Download and Install the Device Monitor

Choose the installation method based on your operating system:

Windows

Download from the Microsoft Store by searching for Kawach Device Monitor.
Install and open the application.

macOS

Sign in to your Kawach Employee account and navigate to: Devices → Report Device
Download the .dmg file from the available options.
Double-click the downloaded file to open it. A window will appear showing the application.
Drag and drop the application into the Applications folder.
Once copied, you will find the application in the Applications folder or Launchpad.
Double-click the application to open and run it.

Linux (Ubuntu/Debian)

Run the following commands:

curl -fsSL https://app-dist.kawach.ai/key.gpg | sudo gpg --dearmor -o /usr/share/keyrings/kawach.gpg

echo "deb [signed-by=/usr/share/keyrings/kawach.gpg] https://app-dist.kawach.ai/release stable non-free" | sudo tee /etc/apt/sources.list.d/kawach.list

sudo apt update

sudo apt install kawach-device-monitor

Step 2: Complete Setup

Follow the on-screen instructions to complete installation.
Sign in using your Kawach work account if prompted.
The device will automatically register with Kawach and begin posture checks.

After the Setup

Once the setup is complete:

Device security checks run continuously in the background.
Compliance findings are visible within Kawach under device monitoring.
Teams gain centralized visibility into endpoint compliance without manual checks.
This setup supports ongoing compliance by ensuring device-level controls are consistently monitored and available as evidence.

Troubleshooting

Installation blocked by SmartScreen

Ensure you click More info and then Run anyway when prompted by Microsoft Defender SmartScreen.
Device not visible in Kawach

Confirm that the user is logged in and correctly mapped to the device in Kawach.
Checks not updating

Allow a few minutes after installation. If issues persist, restart the application or reinstall the Device Monitor.

Updated on 08 January, 2026

Other Articles