Configure Apple Team ID in MDM Profile

brentmichael200
New Contributor

I am able to get CBDefense to install just fine however with Apple newest updates we have to go to security preferences and hit Allow. They have a recommendation on their site for this issue it says: " For enterprise deployments where it is necessary to distribute software that includes kexts without requiring user approval, you will need to configure the Apple Team IDs for our Carbon Black Products in your MDM Profile" My question is how am I able to do that? This is my first time having to do anything like that.

Thanks!

8 REPLIES 8

bstephens
New Contributor II

Found the answer to this earlier today (Thanks AVmcclint):

https://www.jamf.com/jamf-nation/discussions/27654/system-extensions-blocked-after-upgrading-to-high-sierra-10-13-4

Get the Kext Team ID by running the following in terminal:
sqlite3 /var/db/SystemPolicyConfiguration/KextPolicy
SELECT * FROM kext_policy;

From <https://grahamgilbert.com/blog/2017/09/11/enabling-kernel-extensions-in-high-sierra/>

Now that you have the Team ID create a configuration profile in JAMF:06bde54dc20046df8e964918574597aa

kevinmwhite
New Contributor III

It's easier than this with 10.13.4 to find the Developer Team IDs.

On a computer with KEXT already installed and approved, open System Information.app > Extensions > Sort by the Obtained From column > look for items with "Identified Developer" > then look for the 10 character ID in the "Signed by:" line.

2ddc0b980a3f4b2f85c7f7d3c8aa2259

kevinmwhite
New Contributor III

Also... here is a list of the Developer Team IDs that I've come across so far...

Cisco - DE8Y96K9QP
LogMeIn - GFNFVT632V
Sophos - 2H5GFH3774
VMware - EG7KH642X6
Zoom - BJ4HAAB9B3
HP - 6HB5Y2QTA3
Logitech - QED4VVPZWA

andymallins
New Contributor III

Some more

McAfee, Inc. - GT8P3H7SPW

Citrix Systems, Inc. - U42NNPDKG7

Avg Technologies - XSJ59WMJBM

brentmichael200
New Contributor

That worked! Thanks

PhillyPhoto
Valued Contributor

For more Team IDs, check out this spreadsheet open to everyone.

kcadm
New Contributor II

Some more:)

F-Secure:
com.f-secure.kext.fsauth|6KALSAFZJC

Cisco:
com.cisco.kext.acsock|DE8Y96K9QP|

VMware:
com.vmware.kext.vmci|EG7KH642X6|
com.vmware.kext.vmnet|EG7KH642X6|
com.vmware.kext.vmioplug.15.2.1|EG7KH642X6|
com.vmware.kext.vmx86|EG7KH642X6|

Citrix Systems, Inc.:
com.citrix.kernel.dneregistry|U42NNPDKG7|
com.citrix.kernel.dne|U42NNPDKG7|
com.citrix.kernel.sslvpn|U42NNPDKG7|

VirtualBox:
org.virtualbox.kext.VBoxDrv|VB5E2TV963|
org.virtualbox.kext.VBoxUSB|VB5E2TV963|
org.virtualbox.kext.VBoxNetFlt|VB5E2TV963|
org.virtualbox.kext.VBoxNetAdp|VB5E2TV963|

Alsoft (DiskWarrior):
com.alsoft.Preview|RGB7385E8Y|

Jakadoo
New Contributor

Has anyone been able to find CrowdStrike's Team ID?