Endpoint Standard: Full Disk Access Not Shown as Enabled When Deployed Using MDM (JAMF PRO)

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Running repcli status command returns the following for FDA config:

Full Disk Access Configurations:
Repmgr: Not Configured
System Extension: Unknown
OSQuery: Unknown
Uninstall Helper: Unknown
Uninstall UI: Unknown

Environment

• Endpoint Standard Sensor: 3.5.1.x - 3.5.2.x
• Apple macOS: 11.0 and Higher (Big Sur)

Cause

1. Detection algorithm used by Sensor
2. Operating System limitation related to correctly displaying this information when pushed via MDM profile

Resolution

The behavior is expected to be fixed in a future sensor release (3.5.3.x). Upgrade affected sensors to this version when it becomes available.

Additional Information

• As a workaround, Full Disk Access can be granted manually
• Even after granting Full Disk Access via MDM (JAMF Pro) "com.carbonblack.defense.ui" is unchecked under the System Preferences, this is OS limitation