Starting with Resilio Connect v2.11 Agent, a new system extension on macOS is required for Transparent Selective Sync. The end-user is prompted to approve Resilio’s Fuse Kernel extensions and grant some other permissions and until it's done, Transparent Selective Sync for Mac will not work properly.
It's a known issue that the prompting dialog does not appear on macOS 11.6.0, 11.7.0 (M1), 11.6.8 (Intel). However, after rebooting the system, kernel extensions are installed and TSS works correctly.
Upon update from older versions, Finder requires user permissions to move Resilio Connect Agent to Applications folder.
Issue
After a manual installation or remote deployment of the Resilio Connect Agent 2.11 for Mac on macOS High Sierra (10.13) and later, the operating system shows the System Extension Blocked warning when the Agent is first launched and a Job with Transparent Selective Sync has been added to the Agent.
Until the extension is allowed, error "Waiting for system extensions to be allowed" may show up on a TSS folder. The error will resolve itself automatically.
On macOS Big Sur with M1 chip system, many system extensions are disabled by default and Administrators need to re-enable them.
Solution
When you receive the System Extension Blocked warning:
- Click Open Security Preferences (if available). Alternatively, click OK, go to System Preferences in the Dock or in the Apple menu, then click Security & Privacy.
2. Click on the Padlock and provide your Admin Password to make security changes
3. Click Allow for the blocked system software from Resilio, Inc.
On macOS Big Sur, System extensions need to enabled by the Administrator first. For more info on this, please refer to: https://support.apple.com/en-us/HT211860.
Also, there was a bug in Big Sur that caused endless reboot messages for Kernel extensions. This was resolved by Apple in 11.3. In order to run on Big Sur with M1 chips, customers need to have BigSur 11.3.1 or later installed.
System administrators can use MDM to whitelist specific kernel extensions and thus suppress these warnings. For more details, please refer to these Apple resources:
- https://support.apple.com/en-us/HT208019
- https://developer.apple.com/library/content/technotes/tn2459/_index.html
System administrators can whitelist kernel extensions based on the Resilio Team ID: 2953Z5SZSK. For details about using an MDM tool like Jamf Pro, refer to this article.
Resilio Connect helper tools
On older OS X (10.13) Resilio Connect requires permissions to install helper tools, which is safe. The tool is used to mount and manage the virtual folder on the file system. No more action is required apart from providing the password for installation of helper tool to complete.
