Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: KEXT Approval failing on 3.5.x sensors

Carbon Black Cloud: KEXT Approval failing on 3.5.x sensors

Environment

  • Endpoint Sensor version : 3.5.1.x
  • Apple macOS: 10.16.x and above
  • Carbon Black Cloud: All supported versions

Symptoms

  • KEXT approval fails on MAC sensors with versions 3.5.1 and above.
  • Sensor.log :
01/28/21 14:04:18 [INFO] 65ef detected not loaded kext com.carbonblack.defense.kext
01/28/21 14:04:18 [INFO] 65ef found system extension waiting for activation
01/28/21 14:04:18 [INFO] 65ef found system extension waiting for activation
01/28/21 14:04:18 [ERROR] 65ef repairToSystemExtension: Failed to load SYSEXT. Received error code: 254; Repmgr start-up will retry.


 

Cause

Although the user is trying to get the KEXT approval , the sytem is trying to load the System Extensions (SYSEXT), which is the new format for MAC Big sur.
 

Resolution


Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎03-03-2021
Views:
851
Contributors