Determine if a MDM solution is being used.
- Run the below command
sudo profiles -P
- Results for no MDM
There are no configuration profiles installed.
- Results for with MDM will contain the below in the output:
com.apple.mdm
Approve Extensions using MDM (preferred)
- For full MDM Approval methods please see the following document: https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-sensor-installation-guide/GUID-70A0E115-73D5-40E1-B80C-1700DC335D25.html
- Also to get started please see https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Cloud-How-to-Get-Started-with-MDM-Deployment/ta-p/109390
Approve Extensions without MDM
In cases where the approval is not in place, complete the following steps:
- Open Security Preferences
- Open "Security & Privacy"
- Click Unlock to change settings and select "App Store and identified developers" then click "Allow" for Carbon Black App
- Verify system extension by running the below command
sudo Systemextensionsctl list
- If results show that you need to reboot to unload old driver proceed with reboot.
- Check by refreshing the Console or CBC app in top right corner after reboot
- Verify FDA (Full Disk Access) and approve if needed
- Console
- https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Cloud-How-to-Find-macOS-Sensors-Where-Full-Disk/ta-p/112818
- Manually on the system
- https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-sensor-installation-guide/GUID-0325F3AC-3E3F-49FD-952B-96343EF3C405.html
If you've verified a reboot does not resolve the issue, and all approvals are in place, please
Contact Technical Support