Kernel Extensions
Use the Kernel Extensions profile configuration to enable the installation of kernel extensions on devices when:
Note: Requires macOS 10.13.2 or later.
| Allow User to Approve Additional Kernel Extensions | Allow device users to approve additional kernel extensions. If this option is enabled, users can approve additional kernel extensions that are not explicitly allowed in this profile configuration. |
| Allowed Team Identifiers | Use this section to add or delete allowed team identifiers for kernel extensions. All validly signed kernel extensions of the specified team identifiers will be allowed to load onto the device. |
| Allowed Kernel Extensions | Use this section to add or delete kernel extensions that are allowed to load. Enter the bundle identifier and team identifier for each kernel extension that will be allowed to load. For unsigned legacy kernel extensions, leave the team identifier empty. |
Note: If you need to reduce the security policy to Reduced Security on a Mac with Apple
silicon that is not part of Apple School Manager or Apple Business manager, follow
the steps as presented in Change security settings on the startup disk of a
Mac with Apple silicon.