How NVM Provisioning Works in XDR / Secure Client (Cloud)
1. Default Deployment & Profiles
The XDR Default Deployment automatically includes the “NVM Cloud Default Profile”, which configures endpoints with the necessary bootstrap settings to register with Cisco XDR.
You cannot download the bootstrap file separately, as it is embedded and pushed by the deployment profile itself.
2. Customization via Copying the Default Deployment
If you need to customize:
Navigate to Client Management → Deployments.
Make a copy of the XDR Default Deployment.
Modify the modules/profiles as needed (e.g. NVM policies, tamper protection).
Download the full installer—this embeds the NVM bootstrap into the package that endpoints install.
3. Profiles Management
Go to Client Management → Profiles to view or customize:
NVM profile (if included in your deployment).
Default profile editing: copy and edit configurations (NVM data collection policies, trusted network detection, tamper protection).
Editing and saving a copied profile lets you influence bootstrap behavior indirectly.
Why the Bootstrap File Isn’t Downloadable Directly
Cisco treats the NVM bootstrap as an internal configuration block tied to the Secure Client installation package.
It is not intended for manual distribution—profiles carry the configuration inside the installer instead of exposing discrete bootstrap files.
Recommended Steps to Configure NVM Module for Cloud
Step Action
1 Copy the XDR Default Deployment in Client Management → Deployments.
2 Customize by adding or editing the NVM profile via Client Management → Profiles (duplicate default, then modify)
3 Download the Full Installer to deploy to endpoints — the bootstrap is embedded within
4 Deploy this package to endpoints — Secure Client will self-provision NVM post-installation
5 Monitor NVM data flow and status from Cisco XDR or Secure Client dashboards
Summary
There’s no manual bootstrap file extraction supported from the XDR console.
The bootstrap is delivered automatically via the Secure Client installer tied to your deployment profile.
To customize NVM behavior, make a copy of the default deployment and default NVM profile, then re-deploy endpoints.
