Local Install (Single Machine)

When to use this guide

Use it to protect a single machine — a laptop, a test device, a small office without central management. For fleet-wide rollout use the GPO, Intune, macOS MDM, or Linux guides instead. Tip: the dashboard's Agents → Local agent install page shows these same steps with your organization's Server URL and License key already filled in.

1. Download the installer

Log in to your dashboard, open Agents, and download the installer for your operating system: the .exe/.msi for Windows, the .dmg for macOS, or the .deb for Linux.

2. Install the agent

Windows

Double-click the installer and click through (Next → Install → Finish). The app installs as ZeusLock - AI Data Protection.

macOS

Open the .dmg and drag ZeusLock - AI Data Protection into Applications.

First launch only: if macOS reports an unidentified developer, go to System Settings → Privacy & Security and click Open Anyway, then open the app again.

Linux (Debian/Ubuntu)

sudo apt install ./zeuslock-desktop-agent_*.deb

3. Configure the Server URL and License key

The installer carries no key. Create one config file with your Server URL (your ZeusLock API address) and License key (an organization API key from the dashboard's API Keys page — or copy the ready-made command from the dashboard's Local agent install page). Run the command for your OS, replacing zl_YOUR_LICENSE_KEY:

Windows — PowerShell (as Administrator)

$dir = "C:\ProgramData\ZeusLockDLP"
New-Item -ItemType Directory -Force -Path $dir | Out-Null
$json = '{"ServerUrl":"https://api.zeuslock.ai","LicenseKey":"zl_YOUR_LICENSE_KEY"}'
[System.IO.File]::WriteAllText("$dir\config.json", $json, (New-Object System.Text.UTF8Encoding($false)))

macOS — Terminal

sudo mkdir -p "/Library/Application Support/ZeusLockDLP"
sudo tee "/Library/Application Support/ZeusLockDLP/config.json" >/dev/null <<'EOF'
{
  "ServerUrl": "https://api.zeuslock.ai",
  "LicenseKey": "zl_YOUR_LICENSE_KEY"
}
EOF

Linux — Terminal

sudo apt install ./zeuslock-desktop-agent_*.deb
sudo mkdir -p /etc/zeuslock-dlp
sudo tee /etc/zeuslock-dlp/config.json >/dev/null <<'EOF'
{
  "ServerUrl": "https://api.zeuslock.ai",
  "LicenseKey": "zl_YOUR_LICENSE_KEY"
}
EOF

To point the machine at a different organization later, change LicenseKey in that same file and restart the agent. These paths are for agent 1.0.13 and later.

4. Start the agent and approve the certificate

Open ZeusLock - AI Data Protection — from the Start menu (Windows), Applications (macOS), or your app menu / zeuslock-ai-data-protection (Linux).

If the agent was already running (some installers auto-launch it), quit it first — tray icon → Quit — and open it again. It reads the config file only when it starts.

On first launch, approve the certificate prompt — this is required. The agent installs a local inspection certificate so it can read and protect your AI traffic; the OS asks for your password or keychain permission. If you skip it, browsers show "Your connection is not private" on AI sites (see Troubleshooting).

A ZeusLock icon appears in your tray / menu bar. Click it — it should say Protection active and show your organization's name.

5. Verify it's working

1. Click the tray icon and confirm Protection active and an active license.
2. Open a browser, go to a covered AI site (e.g. ChatGPT), and send a fake card number such as My card is 4111 1111 1111 1111.
3. The agent flags or blocks it, and an incident appears in your dashboard under Incidents. The machine also appears under Agents.

Troubleshooting

# macOS
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "$HOME/Library/Application Support/ZeusLock DLP Agent/certs/zeuslock-ca.crt"
# Windows (PowerShell as Administrator)
certutil -addstore -f Root "%APPDATA%\ZeusLock DLP Agent\certs\zeuslock-ca.cer"
# Linux
sudo install -D -m 0644 "$HOME/.config/ZeusLock DLP Agent/certs/zeuslock-ca.crt" /usr/local/share/ca-certificates/zeuslock-dlp-ca.crt && sudo update-ca-certificates