Perform the following procedure to allow the agent kernel extension during agent installation or upgrade (for Mojave or later macOS versions).

Procedure

  1. Run the Carbon Black App Control agent installer.

    For non-MDM installations on Mojave (or later), while you are running the Carbon Black App Control agent installer, macOS will report that a system extension signed by Carbon Black, Inc. was blocked. This will happen even if the extension is already approved on the system.

  2. When this message appears, go to System Preferences > Security & Privacy on the macOS system and click the Allow button for "Carbon Black, Inc.".

    (This was ‘Bit9, Inc.’ for agents prior to 7.2.3 Patch 12.)

    Important:

    It is possible that you delay or are unable to allow the kernel extension immediately after agent installation or upgrade. For example, you might automatically upgrade unattended endpoints.

    If you do not allow the kernel extension, agent installation continues, and the upgraded agent will connect to the server, but it will not enforce rules until you allow the extension to load. On the Carbon Black App Control console, this agent will show a status of Unprotected, Reboot Required. In this case, complete the steps in Allow the Agent Kernel Extension After Agent Installation or Upgrade on Kernel Extension Supporting macOS Versions.