Without the Kernel Extension Policy payload in place, administrators must rely on end-users to manually approve KEXT loading.
#Vmware tools for mac os high serra install
If you are unfamiliar with KEXTs, you might be installing or using them unknowingly – especially if you install hardware drivers and/or software for security/compliance, audio/video, and/or virtualization. This payload, the Kernel Extension Policy, manages user-approved kernel extension loading.
Additional Considerations for User Approved MDMĬurrently, User Approved MDM is a requirement for one macOS profile payload. In these cases, the user must additionally approve the enrollment profile in the profiles preference panel. However, for VMware AirWatch Agent 2.4.2 or earlier, the enrollment process is not user-approved. The VMware AirWatch Agent for macOS version 2.4.3 and later fully supports User Approved MDM. If DEP is not an option right now, use the Web enrollment flow. However, strongly consider implementing Apple DEP as the primary enrollment mechanism for User Approved MDM on macOS. VMware AirWatch supports all current mechanisms for User Approved MDM enrollment. However, once unenrolled or wiped, these devices must reenroll using one of the three previously mentioned flows to be user-approved.
#Vmware tools for mac os high serra manual
Automated Enrollment with Manual Approval – This method uses automation to install the MDM enrollment profile.DEP Enrollment – As a corporate-owned enrollment flow, DEP enrollment is considered user-approved.However, this method prevents automated installation of the MDM enrollment profile through scripting, remote screen sharing, or other methods. User-Initiated Profile Installation – Performed through the profiles preference panel, this method ensures the user agrees to management and approves the particular system performing the management.
To qualify as a user-approved enrollment type, the MDM profile must install one of the following ways. This enrollment flow requires the end-user to approve device enrollment before an administrator can manage its security-sensitive settings. The release of macOS High Sierra 10.13.2 introduces User Approved Mobile Device Management (MDM) enrollment.
0 kommentar(er)
