Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-9652: User Approval of MDM enrollment introduced with macOS High Sierra 10.13.2

App Access Service ,   App Gateway Service ,  

5 January,18 at 05:00 PM


User Approval of MDM enrollment has been introduced with macOS High Sierra 10.13.2. How does that impact Mac enrollment with Centrify Identity Platform?

Apple Reference for User Approved MDM enrollment: (link provided as a courtesy and subject to change):


An Administrator or User will now see a notice under the Centrify Identity Platform Profile, indicating: "
Functionality may be limited until this profile is approved.":

User-added image

In working with Apple, Centrify noticed the following two things;

1. Users do not need to approve the profile and it does not affect any MDM profiles.

2. As of 10.13.2, the only MDM functionality that will be unavailable to a un-approved MDM enrollment is the ability to install the new (to 10.13.2) "Secure Kernel Extension Loading" payload. Centrify does not do 'Secure Kernel Extension Loading' in the MDM profiles.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.