Granting macOS Sensor v7.0+ Access on macOS v11.0+ Big Sur

As part of the transition to system extensions in macOS 11.0 and later versions, you must approve the new system extension and network filtering and allow Full Disk Access.

For example, this process is similar to kernel extension approval, which was added in macOS 10.13.

This process does not replace the kernel extension approval process for running the Carbon Black EDR sensor on macOS versions prior to 11.0.

To be completely effective, the Carbon Black EDR macOS sensor must get approval for the system extension, network filtering, and Full Disk Access. You can accomplish this manually on each endpoint, or for quicker and more consistent endpoint management, you can manage these settings across your organization through the creation and deployment of a mobile device management (MDM) profile.