NVM XDR Manual setup

Antonio Macia — Mon, 14 Jul 2025 13:26:05 GMT

Hi,

Is it possible to manually setup the NVM module for Cloud? From the XDR console I just can download the ServiceProfile XML, but not the Bootstrap file. Also, I don't see any reference manual on how to do it.

Thanks

Re: NVM XDR Manual setup

wajidhassan — Mon, 14 Jul 2025 15:48:27 GMT

How NVM Provisioning Works in XDR / Secure Client (Cloud)
1. Default Deployment & Profiles
The XDR Default Deployment automatically includes the “NVM Cloud Default Profile”, which configures endpoints with the necessary bootstrap settings to register with Cisco XDR.

You cannot download the bootstrap file separately, as it is embedded and pushed by the deployment profile itself.

2. Customization via Copying the Default Deployment
If you need to customize:

Navigate to Client Management → Deployments.

Make a copy of the XDR Default Deployment.

Modify the modules/profiles as needed (e.g. NVM policies, tamper protection).

Download the full installer—this embeds the NVM bootstrap into the package that endpoints install.

3. Profiles Management
Go to Client Management → Profiles to view or customize:

NVM profile (if included in your deployment).

Default profile editing: copy and edit configurations (NVM data collection policies, trusted network detection, tamper protection).

Editing and saving a copied profile lets you influence bootstrap behavior indirectly.

Why the Bootstrap File Isn’t Downloadable Directly
Cisco treats the NVM bootstrap as an internal configuration block tied to the Secure Client installation package.

It is not intended for manual distribution—profiles carry the configuration inside the installer instead of exposing discrete bootstrap files.

Recommended Steps to Configure NVM Module for Cloud
Step Action
1 Copy the XDR Default Deployment in Client Management → Deployments.
2 Customize by adding or editing the NVM profile via Client Management → Profiles (duplicate default, then modify)
3 Download the Full Installer to deploy to endpoints — the bootstrap is embedded within
4 Deploy this package to endpoints — Secure Client will self-provision NVM post-installation
5 Monitor NVM data flow and status from Cisco XDR or Secure Client dashboards

Summary
There’s no manual bootstrap file extraction supported from the XDR console.

The bootstrap is delivered automatically via the Secure Client installer tied to your deployment profile.

To customize NVM behavior, make a copy of the default deployment and default NVM profile, then re-deploy endpoints.

Re: NVM XDR Manual setup

Antonio Macia — Tue, 15 Jul 2025 06:58:56 GMT

Hi @wajidhassan

For packaging redistribution purposes our software deployment team needs to manually setup the NVM profile using the .msi packages from software.cisco.com instead of the ones downladed from XDR. The reason behind that is the packages downloaded from XDR don't have the same uninstall options than the the .msi files downloaded from software.cisco.com, that's why I was wondering if I could just download the XML files from XDR and manually incorporate them.

Thanks.

topic NVM XDR Manual setup in Security Analytics

NVM XDR Manual setup

Re: NVM XDR Manual setup

Re: NVM XDR Manual setup