Kernel Extensions
Use the Kernel Extensions profile configuration to enable the installation of kernel extensions on devices.
Note: Requires macOS 10.13.2 or later.
| Allow user to approve additional kernel extensions | Allow end users to approve additional kernel extensions. If this option is enabled, users can approve additional kernel extensions that are not explicitly allowed in this profile configuration. |
Allowed Team Identifiers
This section lists the allowed team identifiers for kernel extensions. All validly signed kernel extensions of the specified team identifiers will be allowed to load onto the device.
| Add | Adds a new team identifier for kernel extensions to the list. |
| Edit | Enables you to edit the selected team identifier. |
| Delete | Deletes the selected team identifier from the list. |
Allowed Kernel Extensions
This section lists the kernel extensions that are allowed to load. Enter the bundle identifier and team identifier for each kernel extension that will be allowed to load. For unsigned legacy kernel extensions, leave the team identifier empty.
| Add | Adds a new kernel extension to the list. Enter the bundle identifier and team identifier for the kernel extension. |
| Edit | Enables you to edit the selected kernel extension's bundle identifier or team identifier. |
| Delete | Deletes the selected kernel extension from the list. |