# Deploy to a fleet

> Roll BeamDisk out to Macs with Apple Silicon with Apple Business Manager and your MDM: no kernel extension to approve, one switch per Mac, and an initiator name per Mac.

BeamDisk has no kernel extension, so deploying it doesn't touch your Macs' security policy: no Reduced Security, no Recovery-mode visit, nothing for the kernel-extension policy.

## Roll it out

1. **Buy in volume.** Buy BeamDisk for Business through Apple Business Manager, and assign it to Macs with your MDM, like any App Store app.
2. **Turn it on.** On each Mac, BeamDisk asks once to be turned on in System Settings, and once for permission to attach disks; macOS also asks once whether it may use the local network. See [Install BeamDisk](https://beamdisk.app/docs/getting-started/install/).
3. **Allow each Mac on its targets.** Every Mac has its own initiator name, shown under This Mac in BeamDisk's window and in Settings → General. Allow it on the targets that Mac should use.
4. **Add the disks** with Add Disk. CHAP secrets are stored in that Mac's Keychain.

## Initiator names

BeamDisk makes a unique initiator name for each Mac the first time it runs, in the form `iqn.2026-10.com.3rdbitlabs:` followed by 12 hexadecimal digits. To use your own naming scheme, click **Change…** next to it in Settings → General. Change it only if your servers expect a particular name.

- The Mac's disks must be disconnected first (**Disconnect All**): the new name is used from the next connect.
- The name must be a valid iSCSI name, such as `iqn.2026-10.com.example:name`, in lowercase letters, digits and `. - : _`.
- Allow the new name on every target the Mac uses before you connect again.

## Licensing

Business use needs a license after the trial, one per Mac: BeamDisk for Business, bought in volume, or Pro, bought in the app. Both unlock the same features. See [Pricing](https://beamdisk.app/pricing/).

## Not in version 1

- Managed configuration through MDM profiles (targets, CHAP, settings).
- Multipath (MPIO).
- Encryption of iSCSI traffic: keep storage on a trusted network or VLAN.
- Disks that connect before a user logs in: BeamDisk connects disks for the logged-in user.