[MacTUG] Third Party System Extensions under 10.13

[Dani Roloson]

After installing hp-printer-essentials-S-5_7_5.pkg, I get a dialog



[https://www.jamf.com/jamf-nation/file-downloads/images/d98aabf109074873bd7d4fcf85e7c4ab]



[https://www.jamf.com/jamf-nation/file-downloads/images/05fbfc2140ba4c78bef0b19851cc1e79]



I am able to allow this under System Preferences > Security & Privacy > General but I need
to do this via command line.


=================================== REPLY ========================================================


Apple has a Tech Note on this.



Unfortunately, they way it currently works, you would still have to touch each remote machine and turn off this level of security to allow the remote install.



https://developer.apple.com/library/content/technotes/tn2459/_index.html

Technical Note TN2459: User-Approved Kernel Extension Loading<https://developer.apple.com/library/content/technotes/tn2459/_index.html>
developer.apple.com
TN2459: describes the user-approved kernel extension loading feature introduced in macOS High Sierra.





For enterprise deployments where it is necessary to distribute software that includes kernel extensions without requiring user approval, there are two options:

  *   If your workflow is based on imaging, boot into Recovery OS and use the spctl kext-consent command. For detailed information about the spctl command, run the command spctl help. This command can either disable the user approval requirement completely or specify a list of Team IDs whose KEXTs may be loaded without user approval. The spctl command works in any installation environment, including Recovery OS and from NetBoot/NetInstall/NetRestore images.

Note that the Team ID list maintained by spctl is separate from the system-wide policy database.



The extension being installed is hp_io_printerclassdriver_enabler.kext which is required for some printers.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/mactug/attachments/20180206/52376c17/attachment.html>