Affected platforms: macOS High Sierra (10.13) and later, macOS BigSur (with M1) and later
Allow kernel extensions
Resilio Agent helper tools
Admin management of system extensions
Allow kernel extensions
Resilio’s Fuse Kernel Extensions on macOS are essential for enabling Transparent Selective Sync (TSS) in Resilio, allowing the system to manage placeholder files and dynamically download content on demand. Without these extensions, Transparent Selective Sync will not function correctly, and users will be unable to fully utilize the feature.
When the Agent is launched for the first time and a job with Transparent Selective Sync is added, macOS will prompt the user to approve the necessary system extension. Until the extension is allowed, error "Waiting for system extensions to be allowed" shows up on a TSS folder.
Follow the guide below to allow Kernel extensions for the Resilio Agent.
1. Enter the Recovery mode and make changes
To enter Recovery Mode, press and hold the power button until "Options" appears next to "Macintosh HD." Select "Options" to proceed.
Once in Recovery Mode, in the left upper corner click "Utilities-> "Startup Security Utility" and open "Security policy". Inside the policy select option Reduced Security -> Allow user management of kernel extensions from identified developers box. Click OK and wait a few seconds for the policy to apply. After the change is complete, reboot the Mac.
2. Allow extensions for the Agent
After booting up, start the Resilio Agent.Open System preferences > Privacy and Security and click to enable system extensions. Allow Resilio and restart the Mac again
When you receive the System Extension Blocked warning:
1. Click Open Security Preferences (if available). Alternatively, click OK, go to System Preferences in the Dock or in the Apple menu, then click Security & Privacy.
2. Click on the Padlock and provide your Admin Password to make security changes
3. Click Allow for the blocked system software from Resilio, Inc.
Resilio Agent helper tools
Resilio Agent additionally requires permissions to install helper tools, which is safe. The tool is used to mount and manage the virtual folder on the file system. No more action is required apart from providing the password for installation of helper tool to complete.
Admin management of system extensions
System administrators can use MDM to whitelist specific kernel extensions and thus suppress these warnings. For more details, please refer to these Apple resources:
- https://support.apple.com/en-us/HT208019
-
https://developer.apple.com/library/content/technotes/tn2459/_index.html
System administrators can whitelist kernel extensions based on the Resilio Team ID: 2953Z5SZSK. For details about using an MDM tool like Jamf Pro, refer to this article.