Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Allow System Extension to Install SCP

  1. Last updated
  2. Save as PDF

User consent is required to load the third-party system extensions (Client Proxy on macOS Big Sur 11.2). So make sure to allow the system extension while installing Client Proxy 4.6 and later on macOS Big Sur 11.2. 

Install SCP without using MDM

SCP automatically loads the Skyhigh System Extension extensions every 10 seconds till you provide the necessary consent. A Skyhigh alert appears on whether to permit the Skyhigh System extensions from the Security and Privacy System Preferences panel.

NOTE: SCP status shows ExtAutErr until you allow the system extension by giving consent. 

SCP applies the configured policy after the initial consent is provided. It prompts for a second consent in Network Settings to proceed further.

Note the following to upgrade macOS Catalina with SCP 3.x:

  • Before upgrading macOS Catalina to Big Sur 11.2, uninstalling SCP 3. x is optional.
  • After the macOS Big Sur upgrade, the SCP 3.x status displays Driver Error, which is expected.
  • After the Big Sur upgrade, SCP 4.x can be installed. Make sure to allow system extension to complete installation. 

NOTE: If End Point Security for Mac (ENSM) Firewall is already installed on a system, user consent is not needed. Consent needs to be taken care while activating ENSM Firewall.

 

 

Install SCP using MDM

Refer to Silently Installing SCP 4.6.x using MDM (macOS) to learn about installing SCP using MDM.

Uninstall SCP

A prompt appears for entering the administrator credentials to uninstall the system extension for both SCP standalone and managed with Trellix ePO. If no credentials are entered or incorrect credentials are entered, the SCP removal does not continue. Provide correct credentials for successfully uninstalling SCP. For MDM-managed system, no administrator credentials are required. Jamf has provided a configuration profile through which Client Proxy can be silently uninstalled from the endpoint without the user's intervention.

NOTE: For more details on policy retention, refer to Retain Policy and Client Task Data on the SCP Extension.