Netskope Client is trying to modify a System Extension

[mwestaph]

Hello,

I am getting this message when I attempt to uninstall or install Netskope from Jamf, which prompts me to elevate.

I have given both the Netskope and the Remove Netskope Client full disk access.

I am using the uninstall script for Jamf, provided by Netskope on their download page.

I don't know what more I can do to prevent the pop-up. Help?

[jamf-42]

probably that the config profile for the system extension is not set to be removable.. 

[mwestaph]

Where is that setting?

[jamf-42]

ignore me.. was thinking something else.. paste the script here.. lets see what it does.. 

[mwestaph]

The password I'm being prompted for is the admin password, not the client protection password referenced in the script.

#!/bin/sh

####################################################################################################

#

# Copyright (c) 2016, Netskope, Inc.  All rights reserved.

#

#

####################################################################################################

#

# SUPPORT FOR THIS PROGRAM

#

#       This program is distributed "as is" by Netskope, Inc team. Please contact Netskope support

#       team.

#

####################################################################################################

#

# ABOUT THIS PROGRAM

#

# VERSION : 2.0

#

# NAME

# jamfuninstall.sh -- uninstall Netskope client app thru jmaf

#

#####################################################################################################

# version : 1.0 , this script file is introduced for jamf based uninstallation

# version : 2.0 , [2019-Oct-10] support added for password based uninstallation

####################################################################################################

SCRIPT_NAME=`basename "$0"`

echo "Param1 $1 Param2 $2 Param3 $3"

function print_usage()

{

echo "Usage "

echo " Uninstall without password"

    echo "   jamfuninstall.sh <dummy param 1> <dummy param 2> <dummy param 3>"

echo " Uninstall with password"

    echo "   jamfuninstall.sh <dummy param 1> <dummy param 2> <dummy param 3> <password>"

}

if [[ $# -lt 3 ]] 

then

   echo "Insufficient arguments."

   print_usage

   exit 1

fi

if [[ $# -gt 3 ]]

then

INPASSWORD="$4"

fi

/Applications/Remove\ Netskope\ Client.app/Contents/MacOS/Remove\ Netskope\ Client uninstall_me $INPASSWORD

RETCODE=$?

echo "Uninstaller exited with Return code : $RETCODE"

exit $RETCODE

[jamf-42]

on the config profile for the system extension, how is this set? 

On a TEST device, set this to Removable and try try the script again.. 

Do not scope to production.. 

[mwestaph]

[mm2270 · Accepted solution]

As @jamf-42 mentioned, if you deploy a System Extension and don't set it to the Removable System Extensions under the System Extension Types dropdown, then when a script later tries to remove it, you'll get prompted to enter an admin username and password. That's just how it works.