Fail to deactivate system extensions on Jamf managed environment.

[zohar81]

Hi,I'm developing a container application that has 2 system extensions.
During uninstall on customer environment, the extensions are fail to get deactivated. The customer is working with JAMF environment, and the only way that resolve this problem is to install a profile that allows the extensions automatically (bypass manual extension approval) and than revoke the profile.In addition, even with no dedicated profile for my application, the user need to manually approve the extensions, and deactivating the extensions from the container app fails.Here's the deactivation code from my application :

self.deactivationRequest = OSSystemExtensionRequest.deactivationRequest(forExtensionWithIdentifier: extensionIdentifier, queue: DispatchQueue.global(qos: .default)) self.deactivationRequest!.delegate = self OSSystemExtensionManager.shared.submitRequest(self.deactivationRequest!)

I don't have full visibility of the customer profiles environment, but perhaps you can tell me if there's any global configuration in JAMF that may prevent the extensions from being deactivated ? and how does revoking the profile solves the problem ?
Thanks for the help !

[AJPinto]

This is an Application Development question, not a device management question. You really need to be speaking to Apples Developer support.

The MDM side, a Configuration Profile needs to be pushed to allow the system extension to be removed. You need to research how System Extensions work before you build them into your Applications so you can provide proper support.