Hello,

We have an old piece of hardware (I say old – it's from 2019) that doesn't have newer software, so it still has kernel extensions instead of system extensions. I can't mandate replacing the hardware, so I'm stuck with it.

I'm trying to figure out how to get the software to install under Sonoma on a Silicon Mac. I have found plenty of stuff that says that I have to boot into Recovery, go to the Startup Security Utility, and check the box "Allow remote management of kernel extensions and automatic software updates". But of course naturally I want to automate this, not have to have somebody go around and do this.

The JAMF article about managing legacy kernel extensions includes this baffling item:

"Note: Enrolling computers with JAMF Pro via a PreStage Enrollment can automatically enable this setting. No further action is needed."

"CAN automatically enable." What does that even mean? There's nothing about how to do it, and I can't find any settings in my pre-stage enrollment that seem to have anything to do with it. And I can't find any further documentation!

Does anybody know how JAMF can be persuaded to change "can" into "will"?

Thanks,
Lisa.