Resilio System Kernel Extension Blocked on macOS: enable kernel extenstions

Allow kernel extensions
Resilio Agent helper tools
Admin management of system extensions

Allow kernel extensions

Resilio’s Fuse Kernel Extensions on macOS are essential for enabling Transparent Selective Sync (TSS) in Resilio, allowing the system to manage placeholder files and dynamically download content on demand. Without these extensions, Transparent Selective Sync will not function correctly, and users will be unable to fully utilize the feature.

When the Agent is launched for the first time and a job with Transparent Selective Sync is added, macOS will prompt the user to approve the necessary system extension.  Until the extension is allowed, error "Waiting for system extensions to be allowed" shows up on a TSS folder. 

Follow the guide below to allow Kernel extensions for the Resilio Agent.

Apple Silicon MacIntel-based Mac

To enable system extensions on Apple Silicon Macs, access to recovery mode is required. That will temporarily make the device unavailable on the network. Ensure you plan for downtime and have access to this guide from another device during the process.

1. Enter the Recovery mode and make changes

Shutdown Mac. Note, the warning dialogs may block the Agent from quitting. Close the dialogs, by opening the Security preferences or clicking "Cancel". 
To enter Recovery Mode, press and hold the power button until "Options" appears next to "Macintosh HD." Select "Options" to proceed.

 

 

Once in Recovery Mode, in the left upper corner click "Utilities-> "Startup Security Utility" and open "Security policy". Inside the policy select option Reduced Security -> Allow user management of kernel extensions from identified developers box. Click OK and wait a few seconds for the policy to apply. After the change is complete, reboot the Mac.

2. Allow extensions for the Agent

After booting up, start the Resilio Agent. 
Open System preferences > Privacy and Security and click to enable system extensions. Allow Resilio and restart the Mac again

When you receive the System Extension Blocked warning:

1. Click Open Security Preferences (if available). Alternatively, click OK, go to System Preferences in the Dock or in the Apple menu, then click Security & Privacy.
2. Click on the Padlock and provide your Admin Password to make security changes
3. Click Allow for the blocked system software from Resilio, Inc. 

Resilio Agent helper tools

Resilio Agent additionally requires permissions to install helper tools, which is safe. The tool is used to mount and manage the virtual folder on the file system. No more action is required  apart from providing the password for installation of helper tool to complete. 

Admin management of system extensions 

System administrators can use MDM to whitelist specific kernel extensions and thus suppress these warnings. For more details, please refer to these Apple resources:

• https://support.apple.com/en-us/HT208019
• https://developer.apple.com/library/content/technotes/tn2459/_index.html

  System administrators can whitelist kernel extensions based on the Resilio Team ID: 2953Z5SZSK. For details about using an MDM tool like Jamf Pro, refer to this article.