Whitelist the Resilio Agent for Mac Kernel Extensions using Jamf Pro 10.x

Overview

Starting with macOS High Sierra (10.13), after installing Resilio Agent manually or remotely, the user is prompted to approve the Resilio, Inc. kernel extensions on their Mac. Until the user approves the Resilio Inc. kernel extensions, the Transparent Selective Sync will not work properly.

You can pre-approve the Resilio Kernel extensions and thus eliminate user intervention by whitelisting the Resilio extensions using a Mobile Device Management tool such as Jamf Pro or similar. This feature is supported starting with macOS 10.13.2 and Jamf Pro version 10.3.0 or higher.

The procedure implies creating and applying an MDM configuration profile in Jamf Pro 10.x that whitelists the Resilio kernel extensions to the target computers. Note that the computers must have the User Approved MDM status.

For details on User Approved MDM, refer to these articles:

• https://support.apple.com/en-us/HT208019
• https://www.jamf.com/jamf-nation/articles/499/managing-user-approved-mdm-with-jamf-pro

How to create the MDM configuration profile in Jamf Pro 10.x

1. Log in to Jamf Pro.
2. Select Computers > Configuration Profiles > New.
3. Scroll down to Approved Kernel Extensions.

4. Enter a Display Name and the Team ID. The Resilio Inc. Team ID is2953Z5SZSK.

   

   Note

   Specifying individual kernel extensions to be approved is not required.

5. Save the changes.

6. Deploy the profile to the computers.

7. Initiate a system restart either locally or via the device management service using the RestartDevice command with RebuildCache flagged.

   Note

   For more information, see System extensions in macOS.