Use this procedure to install a KEXT-enabled Sensor on Big Sur. On macOS 11, the attended installer defaults to installing a System Extension sensor. To install into KEXT mode, we recommend using the cbcloud_install_unattended.sh install script, which is found in the mounted DMG of the sensor installer in the docs folder.

Note: Approving the KEXT via MDM for Big Sur is required for KEXT operation on macOS Big Sur. If you do not have an MDM tool, do not attempt KEXT install on macOS Big Sur.

A new -k flag in cbcloud_install_unattended.sh signifies a KEXT sensor install. This flag also works during an update. See macOS command line parameters.

For Kernel Extensions (legacy System Extensions) to run on macOS Big Sur, Apple has added two new restrictions for new installs or updates:

  • Kernel Extensions must be pre-approved via MDM.
  • Kernel Extensions must be approved manually, and the OS requires a reboot after install.

Procedure

  1. Run the cbcloud_install_unattended.sh script. Your mount point may be slightly different than what is shown here:
    sudo /Volumes/CBCloud-3.5.1.19/docs/cbcloud_install_unattended.sh -i /Volumes/CBCloud-3.5.1.19/CBCloud\ Install.pkg -c [Company Registration Code] -k
  2. Before the install finishes, a window appears stating that a System Extension has been updated. Approve this prompt in the Security & Privacy pane of System Preferences. The KEXT must be pre-approved using an MDM provider prior to installation or this alert will be suppressed by the operating system. See Approving the KEXT via MDM for Big Sur for more information on this process. For manual Full Disk Access instructions, see Manually Grant the 3.5.1 or Later Sensor Full Disk Access.
  3. Restart the OS to finish installing the new KEXT.