Install ACC for DEX on macOS

task brazil Updated Oct 23, 2026 3 min read install-acc-for-dex-macos.md
Raw file servicenow.com

Install Agent Client Collector (ACC) on a macOS device so that DEX can collect performance data and identify issues.

Before you begin

  • The ITOM Cloud Services Core plugin (sn_itom_cloud_svc) must be installed.
  • Your instance must be onboarded to use ITOM Cloud Services. For details, contact Customer Support.
  • An agent registration key must be configured.
  • The device must authenticate to ITOM Cloud Services, which uses mutual Transport Layer Security (mTLS) to authenticate devices.
  • Outbound HTTPS traffic on TCP port 443 must be permitted from every device running an ACC agent to the designated ServiceNow cloud FQDNs or IP ranges.
  • If device connectivity to the internet is routed through a proxy network, the proxy must be configured. For details, see Configure ACC to use a proxy for all traffic.
  • The User [sys_user] table must be populated with the first name and last name of the user logged in to the device. The CI record in the production environment is then assigned to the correct user.

For enterprise-wide deployments, contact your Jamf application administrator.

Role required: root

Procedure

  1. Retrieve the agent registration key:

    1. Navigate to All > Agent Client Collector > Deployment > Agent Registration Key.

    2. Select the relevant agent registration key.

    3. Copy the registration key value and store it in a place where you can easily retrieve it when needed.

  2. Retrieve the publicly accessible gateway URL, based on your location:

    • AMER (Americas): itomcnc-prod-gateway-amer.sncapps.service-now.com:443
    • EMEA (Europe): itomcnc-prod-gateway-emea.sncapps.service-now.com:443
    • APAC (Asia Pacific): itomcnc-prod-gateway-apac.sncapps.service-now.com:443
  3. On the device where you're installing the Agent Client Collector, open a Terminal session and access the root folder.

  4. Enter sudo -i and enter your device password.

    Note: You must have administrative privileges on the device to install the agent.

  5. On the device where you’re installing the Agent Client Collector, enter the following command:

    Shell
    CONNECT_WITHOUT_MID="true" ACC_CNC="<gateway_endpoint>" REGISTRATION_KEY="<registration_key>" INSTANCE_URL="https://<instance_url>" bash -c "$(curl -L https://<instance_url>/api/sn_agent/agents/install_agent)"

    The following table describes the parameter values in the command.

Parameter

Description

CONNECT_WITHOUT_MID

Specify true to enable MID-less installation. If you don't specify a value, the regular MID Server WebSocket installation is invoked.

ACC_CNC

Public gateway endpoint for Agent Client Collector that you can specify.

REGISTRATION_KEY

Active and valid agent registration key for the agent to communicate with.

INSTANCE_URL

ServiceNow instance that the agent is registering with.

ACC_ALLOW_LIST

Optional ACC_ALLOW_LIST=0 string that you can add to disable the allow list.Default: The allow list is enabled.

Note: When you disable the allow list, you compromise your system's security. This action is intended as a temporary measure while you're updating the allow list. After you complete the update, remove ACC_ALLOW_LIST=0 from the command line.

ACC_VALIDATE_SIG

Optional ACC_VALIDATE_SIG=0 string that you can add to disable installer certification validation. Default: Validation is enabled.

Note: Disable the certification validation only when you're using nonstandard signature validation tools.

6. Configure the ServiceNow sudoers file.
For details on the procedure, see [Configure the ServiceNow sudoers file](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/digital-end-user-experience-dex/config-sudoers-file.md).
  1. Restart the Agent Client Collector service by unloading and loading the launch daemon.

    Shell
    sudo launchctl unload -w /Library/LaunchDaemons/com.sn.acc.plistsudo launchctl load -w /Library/LaunchDaemons/com.sn.acc.plist

    Note: Restart the service after any change to the acc.yml file or the sudoers file.

  2. View the agent log to confirm that the installation completed.

    Text
    tail -f /Library/Application\ Support/servicenow/agent-client-collector/log/acc.log

Related topics

Create an ACC registration key

DEX architecture

Verify that an Agent Client Collector agent is registered

Uninstall the Agent Client Collector agent from a device

Keywords install acc macosagent client collector macacc for dexinstall agent client collectorinstall acc mac
Search documentation
Search document titles and file paths on the brazil branch