KB-9652: User Approval of MDM enrollment introduced with macOS High Sierra 10.13.2

Home >

KB-9652: User Approval of MDM enrollment introduced with macOS High Sierra 10.13.2

Product:

Centrify Identity Service, App Edition , Centrify Identity Service, App Plus ,

Published:

5 January,18 at 05:00 PM

Rating:

Question:

User Approval of MDM enrollment has been introduced with macOS High Sierra 10.13.2. How does that impact Mac enrollment with Centrify Identity Platform?

Apple Reference for User Approved MDM enrollment: (link provided as a courtesy and subject to change):
https://support.apple.com/en-us/HT208019

Answer:

An Administrator or User will now see a notice under the Centrify Identity Platform Profile, indicating: "Functionality may be limited until this profile is approved.":

User-added image

In working with Apple, Centrify noticed the following two things;

1. Users do not need to approve the profile and it does not affect any MDM profiles.

2. As of 10.13.2, the only MDM functionality that will be unavailable to a un-approved MDM enrollment is the ability to install the new (to 10.13.2) "Secure Kernel Extension Loading" payload. Centrify does not do 'Secure Kernel Extension Loading' in the MDM profiles.