{"id":74566,"date":"2023-06-05T13:09:52","date_gmt":"2023-06-05T17:09:52","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=74566"},"modified":"2024-09-13T11:52:44","modified_gmt":"2024-09-13T15:52:44","slug":"create-mac-system-extension-policy","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-mac-system-extension-policy","title":{"rendered":"Create a Mac System Extension Policy"},"content":{"rendered":"\n

The MacOS System Extension policy lets you pre-approve specific System Extensions before they are installed.\u00a0System Extensions run in the user space, rather than in the kernel space like Kernel Extensions do.\u00a0System Extensions are an important way to support Mobile Device Management (MDM) because they allow extensions to load without user interaction.\u00a0<\/p>\n\n\n\n

<\/p><\/div>

Note:<\/strong> \n

MacOS 15 Sequoia will disable the option to toggle system extensions under\u00a0System Settings > General > Login Items & Extensions > Endpoint Security Extensions<\/strong>\u00a0for end users.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

To create a macOS System Extension policy<\/strong>:\u00a0<\/strong><\/p>\n\n\n\n

    \n
  1. Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
  2. Go to DEVICE MANAGEMENT<\/strong> > Policy Management<\/strong>.<\/li>\n\n\n\n
  3. In the All<\/strong> tab, click (+<\/strong>).<\/li>\n\n\n\n
  4. On the New Policy<\/strong> panel, select the Mac<\/strong> tab.<\/li>\n\n\n\n
  5. Select System Extension Policy <\/strong>from the list, then click configure<\/strong>.<\/li>\n\n\n\n
  6. (Optional) In the Policy Name<\/strong> field, enter a new name for the policy or keep the default. Policy names must be unique.<\/li>\n\n\n\n
  7. (Optional) In the Policy Notes<\/strong> field, enter details like when you created the policy, where you tested it, and where you deployed it.<\/li>\n\n\n\n
  8. Enter your application\u2019s Apple Team ID<\/strong> for the System Extension you want to preapprove. For instructions on locating your Team ID and Bundle ID, see Create a Mac Application Privacy Preferences Policy<\/a>.<\/li>\n\n\n\n
  9. Click Add Bundle ID<\/strong> and enter the unique identifier for the System Extension you want to preapprove. For example, com.webfilter_cloud.se-agent.extension.<\/li>\n\n\n\n
  10. Select Security Extension<\/strong> to preapprove Endpoint Security Framework as the extension type for this app. For example, an antivirus software app can monitor system events to improve security.<\/li>\n\n\n\n
  11. Select Driver Extension<\/strong> to preapprove Hardware Driver Framework as the extension type for this app. For example, a driver for USB or Serial devices can perform installations.<\/li>\n\n\n\n
  12. Select Network Extension<\/strong> to preapprove Network Extension Framework as the extension type for this app. Examples include a content filter, DNS proxy, or VPN client and require the following fields:\n