
This is an unsigned XML file and must be imported into MDM and signed before deployment.

This file can be imported and edited in Jamf or other macOS MDM solution and deployed to enrolled Macs for pre-approval of the settings required by SEP. RemovableSystemExtensions (macOS 12 "Monterey" and SEP RU3 or newer - allows an app to remove its own system extensions without prompting for administrator credentials)Īttached at bottom of this article is a mobileconfig file with the correct settings for all SEP and macOS versions.Network Content Filtering AKA Web Content Filtering (macOS 10.15 and SEP RU1 or newer).Permission to install System Extensions (macOS 10.15 - SEP for Mac RU1 or newer - replaces kernel extensions).Permission to install Kernel Extensions (older SEP versions - required as of macOS 10.13).The following are required by various versions of SEP for Mac client to properly function:


Enrollment in an MDM (Mobile Device Management) system is otherwise necessary for pre-approval of these settings. Users can manually follow the SEP prompts to enable the necessary permissions.
