GlobalProtect
Enable Kernel Extensions in the GlobalProtect App for macOS Endpoints
Table of Contents
Enable Kernel Extensions in the GlobalProtect App for macOS Endpoints
Starting with macOS 10.13, Apple introduced
a software change that requires users to approve kernel extensions
before they can use them.
While users can manually enable
the kernel extension on macOS ( and
selecting
Allow
for the kernel extension),
you can use any Qualified MDM vendor to
create a policy and automatically approve the kernel extension. Apple Technical Note TN2450 describes
the process.The following workflow has been tested using Workspace ONE.
- Create a kernel extension policy.
- Log in to Workspace ONE as an administrator.
- Select , and then select from the drop-down.
- In theAdd Profilearea, clickApple macOS, and then click theDevice Profileicon.
- In theGeneralarea, specify the name for the profile.You can also select an existing kernel extension profile () in the list.
- Add a kernel extension and distribute the relevant policy to macOS devices.
- SelectKernel Extension Policy.
- Enter theTeam Identifierused by the GlobalProtect app (PXPZ95SK77).
- Enter theBundle ID(com.paloaltonetworks.kext.pangpd).
![]()
- ClickSave and Publishto save your changes.
