Carbon Black supports the System Extension for macOS BigSur and subsequent platforms. For platforms prior to macOS BigSur, Carbon Black supports KEXT.
Note: For a System Extenstions support matrix, see:
Kext and System Extension Support.
Allow Users to approve system extensions (optional) – This setting depends on whether the Jamf administrator wants to allow System Extensions from other products to be user-approved. If this setting is enabled, users can approve additional system extensions that are not explicitly allowed by this policy.
- As shown in following example, you can toggle Allow users to approve system extension to control the users approval action for any System Extension of any product.
- You can add System Extensions on the Allowed Team ID and System Extensions tab. These System Extensions do not require user approval. In the following example, we explicitly added the Carbon Black App Control System Extension payload, which does not require user approval.
The following parameters are used in the example shown here:
-
- Display Name: Application Control macOS System Extensions
- System Extension Types: Allowed System Extensions
- Team Identifier: 7AGZNQ2S2T
- Allowed System Extensions: com.vmware.carbonblack.appc-es-loader.appc-es-extension
Example:
