Enabling the use of the device control module on macOS

The device control settings of a protection plan become effective only after loading the device control driver on the protected workload. This section describes how to load the device control driver to enable the use of the device control module on macOS. This is a one-time operation that requires administrator privileges on the endpoint machine.

Supported macOS versions:

• macOS 10.15 (Catalina) and later

• macOS 11.2.3 (Big Sur) and later

To enable the use of device control module on macOS

1. Install Agent for Mac on the machine that you want to protect.
2. Enable device control settings in the protection plan.
3. Apply the protection plan.
4. The "System Extension Blocked" warning will appear on the protected workload. Click Open Security Preferences.
   
5. In the Security & Privacy pane that appears, select App Store and identified developers and then click Allow.
   
6. In the dialog that appears, click Restart to restart the workload and activate the device control settings.