How to install XoLock?

BEFORE YOU INSTALL

System Requirements:

● Windows: 64-bit Windows 10 or later.

● macOS: Compatible with Apple Silicon.

● Stable internet connection for assessment delivery and proctoring.

● Single monitor recommended; external displays may block launch.

● Camera and microphone for proctored assessments.

Close Conflicting Apps Before First Launch:

XoLock blocks apps such as Slack, Discord, Teams, Zoom, remote desktop tools (TeamViewer, AnyDesk, Parsec), screen recorders (OBS, Loom), virtual machines, and other browsers. Close these before launching an assessment.

SCENARIO A: Standard User Install for Windows

1. Download the latest signed installer: XolockSetup.exe (from your organization's Xobin download link or IT portal).
2. Run the installer. If Windows SmartScreen or antivirus warns, confirm the publisher is Xobin and the file is signed. Contact IT if blocked.
3. Complete the Squirrel install. Shortcuts are created automatically; no admin rights are required for per-user install.
4. Launch XoLock from the Start Menu or desktop shortcut.
5. Grant first-run permissions: allow camera and microphone when Windows Privacy prompts appear, or use the launcher's Open Settings links (Settings → Privacy → Camera / Microphone).
6. Allow network access if firewall prompts appear.

Typical install location: C:\Users<username>\AppData\Local\xolock\app-<version>\

Updates: Re-run a newer XolockSetup.exe; Squirrel handles in-place updates.

SCENARIO B: Standard User Install for macOS

1. Download the XoLock DMG from your organization's download link.
2. Open the DMG and drag XoLock.app to Applications.
3. On first launch, if macOS blocks the app, right-click XoLock → Open → Open again, or use System Settings → Privacy & Security → Open Anyway.
4. Grant macOS permissions when prompted: Camera, Microphone, and Screen Recording under System Settings → Privacy & Security. Use the launcher's permission buttons or Open Settings shortcuts.
5. Paste your assessment link in the launcher to begin.

To update the application, reinstall the application’s latest version using the latest .dmg installation package

SCENARIO C: IT-Managed / MDM Deployment for Windows

Recommended Approach:

1. Obtain the signed artifact: XolockSetup.exe and/or XoLock-Windows-x64.zip. Verify SHA-256 against your organization's published checksum (checksums.json from release artifacts).
2. Deploy via MDM (Intune example): App type Line-of-business (LOB) or Win32 app. Install command: XolockSetup.exe /S. Detection rule: file exists at %LocalAppData%\xolock\ or Squirrel registry key. Assignment: Required for exam lab devices; Available for BYOD candidates.
3. SmartScreen / Defender allowlisting: Submit signed installer hash to Microsoft if reputation is still building. Add path allowlist for %LocalAppData%\xolock**\XoLock.exe.
4. Firewall: Allow outbound HTTPS to Xobin assessment and violation-logging endpoints.
5. Optional hardened exam-lab config: Set XOLOCK_ASSESSMENT_ENFORCE_PREFLIGHT_ON_STARTUP=true to quit on startup if forbidden apps or multiple displays are detected. Set XOLOCK_WINDOWS_LOCKDOWN=1 only for dedicated exam kiosks (requires runtime user consent). Do not enable registry or shell replacement unless devices are dedicated exam machines.
6. Secrets / API keys: Do not rely on packaged .env in production; inject XOLOCK_VIOLATION_LOG_API_KEY and backend URLs via MDM at install or first-run provisioning.

SCENARIO D: IT-Managed / MDM Deployment for macOS

1. Obtain the signed and notarized DMG.
2. Deploy via MDM: Package XoLock.app as PKG or deploy the DMG. Install to /Applications/XoLock.app.
3. Privacy Preferences Policy Control (PPPC) profiles: Pre-approve Camera, Microphone, and Screen Recording for XoLock to avoid candidate friction.
4. Gatekeeper: Use notarized builds.
5. Network: Allow outbound HTTPS to Xobin domains.

SCENARIO E: Corporate-Restricted / No Admin Rights

1. XoLock Windows installer runs as invoker (no elevation by default).
2. Per-user install under %LocalAppData% usually works without admin.
3. If IT blocks .exe downloads, request MDM deployment or an approved download portal.
4. macOS users without admin may need IT to install to /Applications and deploy PPPC profiles.

Post-Install Verification:

1. Open XoLock, the launcher shows System checks.
2. Confirm: no blocked apps detected; camera, microphone, screen sharing, and network are allowed.
3. Paste a test assessment link and confirm Launch assessment is enabled.
4. If XoLock bridge unavailable appears, quit and reopen the app, or reinstall.

Updated on: 06/23/2026