Skip to main content
This guide applies to Mac computers

​
About Iru Agent Settings and Database Files

When a Mac is enrolled in Iru Endpoint, the Iru Agent is installed to extend the device management capabilities beyond what Apple’s Mobile Device Management (MDM) framework can achieve. The agent ensures that various configurations, security policies, and applications are enforced and maintained on the device. To support its functionality, the Iru Agent installs a few key components, including the Iru Agent Settings Profile and encrypted database (.dbee) files.
As of April 8, 2026, apps were updated from Kandji to Iru branding. The Agent app name changed from Kandji Agent to Iru Agent. Please update scripts, automations, and utilities that still reference the old app names.

​
Iru Agent Settings Profile

The Iru Agent Settings Profile is an MDM configuration profile automatically installed on all enrolled Mac computers. This profile ensures seamless operation of the Iru Agent and related services such as Self Service, Liftoff, Passport, and Iru Library Manager. It includes several important payloads:
  • Login and Background Items Management (Service Management) - For macOS Ventura and later, this payload ensures users can’t prevent the Iru Agent from loading at startup using System Settings.
  • Notification Settings - This payload ensures the various Iru applications can send notifications to the user.
  • Privacy Preferences Policy Control - This payload ensures the Iru Agent has Full Disk Access to the Mac so it can run custom scripts and install and update both custom and Auto Apps.
  • System Extensions - This payload ensures the Iru ESF Extension installed with Iru Library Manager can activate and deactivate itself without user approval. The Iru ESF Extension is used for the App Blocking Parameter and replaces the older mechanism used for App Blocking. The Iru ESF Extension is more efficient and prevents a blocked application from launching before the process is even able to execute any code as it’s denied by the macOS kernel. The Iru ESF Extension also collects application data for Prism.
These payloads ensure that the Iru Agent can perform critical tasks without user interference, such as enforcing security policies, running scripts, and managing app installations.

​
Encrypted Database Files (.dbee)

The Iru Agent also installs encrypted database files on each device to store essential information locally. These files enable offline functionality and ensure that data is preserved even if network connectivity is lost. The primary database files include:
  • agent.dbee - Contains parameter settings and history for offline usage.
  • kandjidata.dbee - Stores currently enabled features, first-time run information, Self Service deferrals, and scheduled installs.
  • library.dbee - Holds information about Library Items and their statuses for reporting during an agent run.
  • rtcdata.dbee - Stores Real-Time Communication (RTC) messages in case of network failure or power loss.
  • tcdata.dbee - Stores hashes of application data, quarantine data, Endpoint Detection & Response (EDR) offline rules, EDR settings, and other EDR-related events.
  • VBData.dbee - Logs Prism report history.
These database files allow the Iru Agent to function independently of network connectivity by storing critical configuration data locally.