Approving Kernel Extensions for macOS


Information about approving system extensions for macOS application.



Certain applications for macOS install kernel extensions (KEXTs) in order to function properly. Usually in these cases you are prompted to approve the extension within System Preferences -> Security & Privacy -> General; however, in some cases the recently installed extension is not listed for approval, and other methods are required in order to get the software approved.


In this article:


What materials do I need?

  • A computer running macOS High Sierra (10.13), or later.


How do I use this technology?


Normal: Approving Extensions via System Preferences

  1. Open System Preferences.

    macOS Apple Menu with System Preferences... highlighted
  2. Click Security & Privacy.

    macOS System Preferences with Security & Privacy highlighted
  3. Click the General tab.
    • If the Preference pane is locked, then click the lock icon in the lower-left corner.

      macOS System Preferences Security & Privacy General with lock icon highlighted
    • Enter an administrator password, then click Unlock.

      macOS System Preferences unlocking Security & Privacy preferences dialog box
  4. Click Allow next to the developer's kernel extension that requires approval.

    macOS System Preferences Security & Privacy allow system software


Advanced: Approving Extensions via Terminal

If you do not see a kernel extension listed for approval within Security & Privacy settings, you can first try uninstalling the application, and then reinstalling the application. However, if the Allow button is not appearing, you can also approve kexts in recovery mode.

  1. Startup the Mac in recovery mode.
    • Turn on your Mac, and immediately press and hold Command (⌘)-R.
    • Release the keys when you see an Apple log, spinning globe, or other startup screen.
    • If you're prompted to enter a firmware password please contact the IT Services Technical Support Center for further assistance.
    • If you're prompted to enter a password of a user who is an administrator on the Mac, enter the requested password to continue.
    • Startup is complete when you see the macOS Utilities window:

      macOS Recovery Mode
  2. Click the Utilities menu, and select Terminal.

    macOS Recovery Utility Menu
  3. Enter the following command, replacing <VendorID> with the appropriate item from the Vendor ID list below:

    /usr/sbin/spctl kext-consent add <VendorID>

    Press enter.

    macOS Recovery Terminal window with example command
  4. Quit the Terminal application.
  5. Click the Apple menu, and select Restart.

    macOS Recovery Apple Menu with Restart option selected


Vendor IDs

Below is a list of Vendor IDs for applications commonly in use within the University of Alaska system.

  • Cisco: DE8Y96K9QP


Need additional help or have issues

For additional assistance contact the IT Services Technical Support Center via phone at (907) 786-4646, toll-free at (877) 633-3888, email us at



Article ID: 50
Wed 3/18/20 4:01 PM
Mon 9/25/23 1:58 PM