---
title: Install script
description: Install the scanner on one laptop with a single command.
---

The install script detects the platform, downloads the right package, installs the service, and starts the first scan. Use it for pilots, small teams, or a quick test.

## Before you begin

- Administrator rights on the laptop.
- Optionally, an [enrollment token](/surface/admin/enrollment-tokens) if you want the laptop to enroll without a sign-in.

1. **Run the script**

    **macOS, Linux, WSL**

    ```bash
    curl -fsSL https://superalign.ai/surface/releases/install.sh | sudo bash
    ```

    **Windows (PowerShell as Administrator)**

    ```powershell
    irm https://superalign.ai/surface/releases/install.ps1 | iex
    ```

2. **Enroll the laptop**

    Without a token, the script opens your browser. Sign in with your work email and the laptop joins your organization.

    With a token, pass it and no sign-in is needed:

    ```bash
    curl -fsSL https://superalign.ai/surface/releases/install.sh | sudo bash -s -- --enrollment-token sae_xxxxxxxx.yyyyyyyy
    ```

    On Windows, set `SURFACE_ENROLLMENT_TOKEN` in the environment before running the script, or download the pre-filled script from the console's **Downloads** page.

3. **Verify**

    ```bash
    sudo surface status
    ```

    The output shows the version, that the service is running, and your organization name. The laptop appears on **Endpoints** within a few minutes.

:::info
The download is protected by the encrypted connection and by Apple's or Microsoft's signature on the package. Later updates are signed and checked before they install.
:::

## Next steps

- [MDM deployment](/surface/deploy/mdm/overview) for the whole fleet
- [Scanner reference](/surface/scanner/commands) for commands and configuration