The Cb Defense Mac Sensor will not require a reboot and it will reload its KEXT immediately after the approval is done. A dialog will pop up telling users they need to reboot. Please also note that there is new behavior in 10.13.4 after the KEXT approval. Please note that the next Cb Defense Mac Sensor release (3.1) will require KEXT approval regardless of previous approval status due to an updated code signing certificate and bundle ID associ ated with the forthcoming 3.1 release. For enterprise deployments where it is necessary to distribute software that includes kexts without requiring user approval, you will need to configure the Apple Team IDs for our Carbon Black products in your MDM profile. With 10.13.4, user-approval is no longer disabled for software distributions systems. MDM or JAMF) did not require user-approval to load any properly signed kexts. Prior to macOS 10.13.4, software distributions systems (i.e. This does not seem to impact kexts that were user (locally) approved prior to the 10.13.4 upgrade. Kexts approved in previous macOS versions by MDM (or other distribution systems like JAMF) are no longer approved once they've upgraded to 10.13.4. Our products (as well as other kernel-based products) are running into a situation in which kernel extensions (kexts) are no longer approved.
0 Comments
Leave a Reply. |