Composer 10.38.3 issue with "Allow" system software to install

cucaracha
New Contributor III

Screen Shot 2022-05-27 at 7.18.14 PM.pngI am using Composer 10.38.3 to make an installer of Karabiner - Elements, but I keep getting prompted for "System software from application 'Karabiner-VirtualHIDDevice-Manager' was blocked from loading". I am using the snapshot method to capture the installation which I am allowing said software to install. Also I have modified the owner/group to root/admin and applied to all sub folders and files. However, whenever I run the Self Service install, I still get prompted for the "Allow". The software does require Security & Privacy Input Monitoring which I have created a configuration profile for. I still think this is a permissions issue.

1 ACCEPTED SOLUTION

mainelysteve
Valued Contributor II

Most likely not permissions. This is using words like HID and Device so it's probably a system extension or maybe a kext. Those need to be approved via a configuration profile to allow them to load.

https://docs.jamf.com/technical-articles/Managing_Legacy_Kernel_Extensions_in_macOS_Using_Jamf_Pro.h...

https://technology.siprep.org/getting-the-team-id-of-kernel-extensions-in-macos-10-13-and-higher/

First link explains how to create a profile in Jamf Pro for this and the second will help you get the various ID's needed. Make sure you manually allow it load on one machine to extract that info.

View solution in original post

3 REPLIES 3

mainelysteve
Valued Contributor II

Most likely not permissions. This is using words like HID and Device so it's probably a system extension or maybe a kext. Those need to be approved via a configuration profile to allow them to load.

https://docs.jamf.com/technical-articles/Managing_Legacy_Kernel_Extensions_in_macOS_Using_Jamf_Pro.h...

https://technology.siprep.org/getting-the-team-id-of-kernel-extensions-in-macos-10-13-and-higher/

First link explains how to create a profile in Jamf Pro for this and the second will help you get the various ID's needed. Make sure you manually allow it load on one machine to extract that info.

@mainelysteve  It was a system extension, and I used this command line found in your link to get the team identifier.

codesign -dv --verbose=4 /Applications/.Karabiner-VirtualHIDDevice-Manager.app/ 2>&1 | grep TeamIdentifier

 

@cucaracha can you please share your configuration for this software? We've had no success getting this software working with our current configuration profile. 

Screenshot 2023-07-18 at 3.14.31 pm.png