macOS High Sierra 10.13 introduced a new security feature that requires manual user approval before loading new third-party kernel extensions.

User Approved Kernel Extension Loading

To improve security on the Mac, kernel extensions installed with or after the installation of macOS High Sierra require user consent in order to load. This is known as User Approved Kernel Extension Loading. Any user can approve a kernel extension, even if they don’t have administrator privileges.

The following instructions are to enable kernel extensions that have been blocked during software installations in macOS High Sierra or later. Plug in CalDigit devices to your Mac. When installing a software on High Sierra or later you may receive an alert message “System Extension Blocked”. To ensure that your Avast product can fully protect your system, you need to manually allow Avast Software extensions. Allow Avast Software extensions. After installing Avast Security, Avast Premium Security, or Avast Omni, you may see the status message This Mac is in passive mode. This is because the Core Shields are disabled due to the Avast. CampTune, ExtFS for Mac, Hard Disk Manager for Mac, Know how: Mac OS X, KnowHow: Installation, NTFS for Mac OS X Tags: extfs, ExtFS for Mac, Hard Disk Manager, HDM for Mac, howto, mac, ntfs, System Extension Blocked. When you receive the System Extension Blocked warning: Click Open Security Preferences (if available). Alternatively, click OK, go to System Preferences in the Dock or in the Apple menu, then click Security & Privacy. Click Allow for the blocked system software from Bitdefender.


A walk-through of the user approval process


When a user installs an application on a Mac (either from a local source or via Managed Software Center) which loads a third-party extension, the load request is denied and macOS presents the alert shown in Figure 1.


Figure 1 The 'System Extension Blocked' dialog which you would see if you have installed the GlobalProtect VPN application for the first time.


Click on the button labeled 'Open Security Preferences', which will take you to the Security & Privacy panel of Systems Preferences (as shown in Figure 2).

NOTE: If you click the 'OK' button instead, you have 30 minutes in which to navigate to the Security & Privacy System Preference before the Allow button disappears. You would then need to restart the Mac in order to approve the system extension(s).


Avast For Mac High Sierra System Extension Blocked

Figure 2 User approval to load the third-party extension. In this example, selecting 'Allow' will enable loading of kernel extensions from Palo Alto Networks, developers of the GlobalProtect VPN client.


Click on the 'Allow' button to enable the kernel extension to load so that this application (and any other applications by the same developer) will function properly on the Mac. You will be prompted if a restart is required at this time.


Which applications require user approval?


Below is a short list of the third-party applications you would be most likely to encounter at WCER which may require manual approval:

• Box Drive (cloud storage and collaboration application)

• Cisco System's AMP for Endpoints Connector (antivirus and malware protection)

• Palo Alto Networks GlobalProtect (VPN client)

• VMWare Fusion (virtual machine application)


PLEASE NOTE:If any of these applications were already installed when you received your Mac, then the Tech Services administrator would have already approved them so you should not be prompted for approval.


macOS High Sierra 10.13 introduced a new security feature that requires manual user approval before loading new third-party kernel extensions.

User Approved Kernel Extension Loading

To improve security on the Mac, kernel extensions installed with or after the installation of macOS High Sierra require user consent in order to load. This is known as User Approved Kernel Extension Loading. Any user can approve a kernel extension, even if they don’t have administrator privileges.


A walk-through of the user approval process


When a user installs an application on a Mac (either from a local source or via Managed Software Center) which loads a third-party extension, the load request is denied and macOS presents the alert shown in Figure 1.


SierraAvast for mac high sierra system extension blocked free

Figure 1 The 'System Extension Blocked' dialog which you would see if you have installed the GlobalProtect VPN application for the first time.


Avast For Mac High Sierra System Extension Blocked How To

Click on the button labeled 'Open Security Preferences', which will take you to the Security & Privacy panel of Systems Preferences (as shown in Figure 2).

NOTE: If you click the 'OK' button instead, you have 30 minutes in which to navigate to the Security & Privacy System Preference before the Allow button disappears. You would then need to restart the Mac in order to approve the system extension(s).


Figure 2 User approval to load the third-party extension. In this example, selecting 'Allow' will enable loading of kernel extensions from Palo Alto Networks, developers of the GlobalProtect VPN client.


Click on the 'Allow' button to enable the kernel extension to load so that this application (and any other applications by the same developer) will function properly on the Mac. You will be prompted if a restart is required at this time.


Which applications require user approval?


Avast For Mac High Sierra System Extension Blocked Windows 10

Below is a short list of the third-party applications you would be most likely to encounter at WCER which may require manual approval:

Avast for mac high sierra system extension blocked download

Avast For Mac High Sierra System Extension Blocked Free

• Box Drive (cloud storage and collaboration application)

• Cisco System's AMP for Endpoints Connector (antivirus and malware protection)

Avast For Mac High Sierra System Extension Blocked Download

• Palo Alto Networks GlobalProtect (VPN client)

• VMWare Fusion (virtual machine application)


PLEASE NOTE:If any of these applications were already installed when you received your Mac, then the Tech Services administrator would have already approved them so you should not be prompted for approval.