To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

How do I enable extension, allow notification & full disk access on macOS using commandline

Options
Husaini_CP
Husaini_CP W/ Member Posts: 5 Security Scout

Just a question since I'm deploying the WithSecure Element using commandline to all macOS devices.

I tried to install the WithSecure Element via commandline (Terminal) and the program is installed without user noticed.

However, They are require to enable extension, allow notifcation & allow full disk access in order to make the WIthSecure Element function properly. I wanted to have the these 3 things activate and allow without user consent or without user know.

Is there any command that I can done with these 3 things? I have looking the solutions on the internet and hasn't found any single solution on this matter.

Thanks.

Best Answer

  • Sethu Laks
    Sethu Laks W/ Partner, W/ Staff, W/ Moderator Posts: 221 Moderator
    edited December 2023 Solved
    Options

    Hi @Husaini_CP

    According to our R&D, performing a silent installation for the Mac version is not feasible due to the way macOS operates and its design. Over the past few years, Apple has introduced additional permissions that must be granted for our product to function correctly. The only available option is to enable notifications, Full Disk Access, and system extensions without requiring user interaction is by utilizing MDM profiles. Internally, we rely on Jamf to deploy these profiles. This approach ensures proper functioning of our product while adhering to macOS security requirements. Refer to this article: https://support.apple.com/en-gb/guide/deployment/depc0aadd3fe/web

    Best regards,
    Sethu
    Community Moderator | Technical Support Engineer
    WithSecure™  https://www.withsecure.com/en/home

Answers

  • Sethu Laks
    Sethu Laks W/ Partner, W/ Staff, W/ Moderator Posts: 221 Moderator
    edited November 2023
    Options

    Hi @Husaini_CP

    Thank you for contacting the WithSecure Community,

    Please allow me to check your query with our R&D team and I will keep you updated shortly.

    Best regards,
    Sethu
    Community Moderator | Technical Support Engineer
    WithSecure™ https://www.withsecure.com/en/home

  • Husaini_CP
    Husaini_CP W/ Member Posts: 5 Security Scout
    Options

    Resolved by add on MDM.

    Thanks.

  • sam
    sam W/ Member Posts: 1 Security Scout
    Options

    Hi @Husaini_CP ,

    Would you mind to share the solution. I am doing it using MDM profile which doesn't enable the Full Disk Access Silently. I want to install withsecure via JAMF MDM silently and also need to provide full disk access to it silently without user concern.

    Thanks in Advance

  • Husaini_CP
    Husaini_CP W/ Member Posts: 5 Security Scout
    Options

    Hi @sam ,

    I'm using this software to allow all needed permissions. Even though I'm not using JAMF, the MDM profiles generated can be used in different Device management.

    Kindly check link below.
    https://github.com/jamf/PPPC-Utility