If you are deploying the macOS sensor in Kernel Extension mode (macOS 10.14 - macOS 11), include an approved Kernel Extension payload. You can optionally include both System Extension and Kernel Extension payloads to provide flexibility.

Procedure

  1. Enter kernel in the search text box of the device configuration profile.
  2. Select the Kernel Extension Policy payload option and click Configure.
  3. Enter the Carbon Black Cloud team identifier and the Carbon Black Cloud kernel extension bundle ID.
    For example:
    • Team identifier: 7AGZNQ2S2T
    • Bundle ID: com.carbonblack.defense.kext
    Example of an allowed kernel extension.
    Note: This payload pre-approves the Kernel Extension. The user must still enable the Kernel Extension in the Security & Privacy section of System Preferences on the endpoint after you have installed the sensor. The user must then reboot the endpoint.