Non-Admins approving System Extensions

hcgtexas
New Contributor III

I am working on getting the Big Sur update pushed out to my environment and running into an issue with system Extensions. I have the Config Profiles set up in Jamf to push the System Extension, but they show up as "active" but not "enabled" when I run a systemextensionsctl list. I have read that if you have this pushed before installing the apps this is not an issue, but all of our macs already have Apex One and Cisco Anyconnect installed, so that doesn't really help. I am fine with having users manually approve it in System Preferences after they run the OS update, but it requires admin rights.

Is there a way to have a non-admin user finish the System Extension Approval process for applications that ae already installed? Or if I missed a way to completely automate this process?

2 REPLIES 2

JustDeWon
Contributor III

Do you have "Allow users to approve System Extensions" checked?
06981f2300a8493e93998e4ce8325328

hcgtexas
New Contributor III

Yes, I have that checked on any config profiles with the System Extension payload