Install script

Install the scanner on one laptop with a single command.

The install script detects the platform, downloads the right package, installs the service, and starts the first scan. Use it for pilots, small teams, or a quick test.

Before you begin

Administrator rights on the laptop.
Optionally, an enrollment token if you want the laptop to enroll without a sign-in.

Run the script

curl -fsSL https://superalign.ai/surface/releases/install.sh | sudo bash

irm https://superalign.ai/surface/releases/install.ps1 | iex

Enroll the laptop

Without a token, the script opens your browser. Sign in with your work email and the laptop joins your organization.

With a token, pass it and no sign-in is needed:

curl -fsSL https://superalign.ai/surface/releases/install.sh | sudo bash -s -- --enrollment-token sae_xxxxxxxx.yyyyyyyy

On Windows, set SURFACE_ENROLLMENT_TOKEN in the environment before running the script, or download the pre-filled script from the console’s Downloads page.

Verify

sudo surface status

The output shows the version, that the service is running, and your organization name. The laptop appears on Endpoints within a few minutes.

Next steps

MDM deployment for the whole fleet
Scanner reference for commands and configuration