symantec kernel extensions need authorization

If you use macOS, run kextstat grep -v com.apple to see how many third party kernel extensions you have running. Save and deploy your kext allow-listing policy by UAMDM. Kernel programming interfaces (KPIs) will be deprecated as alternatives become available, and future OS releases will no longer load kernel extensions that use deprecated KPIs by default.For macOS 10.15, macOS 11.x, mac OS 12.x, download Malwarebytes_Protection_profile_10_15.mobileconfig.For macOS 10.13 or macOS 10.14, download Malwarebyets_Protection_profile.mobileconfig.Deploy kext or security framework allow-listing policy using UAMDM To bypass the System Extension Blocked message on your Mac endpoints, deploy a kernel extension (kext) or security framework extension allow-listing policy using a User Approved Mobile Device Management (UAMDM) before you deploy the Malwarebytes Endpoint Agent. For more details, refer to Apple's Technical Note TN2459, User-Approved Kernel Extension Loading. Normally, you must manually allow the kernel extension at the computer. In Big Sur, all kernel extensions need user approval, including updated versions of existing kexts. Apple blocks this button from being clicked remotely via screen sharing or scripted actions. The user must click on a button in System Preferences. Third-party kernel extensions can only be installed with the user's explicit consent. If you have Symantec Endpoint Protection 14 and then upgrade to macOS 10.13, you don't need to reauthorize the kernel extension. If you uninstall and reinstall the client, you don't need to reauthorize the kernel extension. When a kernel extension is installed, the user sees a System Extension Blocked alert. You only need to authorize the kernel extension once during the life of the computer's operating system. Malwarebytes Endpoint Protection and Endpoint Detection and Response for Mac uses a kernel extension for macOS 10.13, 10.14 and a security framework extension for macOS 10.15, 11.x, and 12.x, to deploy endpoints to Apple computers.

These changes affect the ability to deploy software using kernel or security framework extensions in the enterprise. Starting with macOS High Sierra 10.13, a kernel extension must be approved by an administrator account or a Mobile Device Management (MDM) profile before it can load. Apple has made changes starting with macOS High Sierra 10.13. Legacy system extensions, also known as kernel extensions or kexts, execute in a highly privileged mode of the system.

Symantec kernel extensions need authorization