Allowing Syncplicity Kernel Extension for macOS

To provide the full range of functionalities for our SyncDrive, the Syncplicity client for macOS relies on a system extension, working in the kernel space, also known as kernel extension. The kernel extension helps Syncplicity integrate with the macOS file system and deliver your files on demand, whenever you access them in Finder.

MacOS 11.0 (Big Sur) and later require explicit consent from the user to allow the use of the kernel extension, even if it is provided by trusted developers, like Syncplicity. Any user can allow the kernel extension with the procedure described below.

Once the kernel extension is allowed, there is no need to allow new versions of the kernel extension on subsequent updates of the client or the OS.

System administrators of large-scale Mac deployments can allow the kernel extension on behalf of the users through MDM systems.

Allowing extension on Apple silicon devices

On devices with Apple silicon (M1 chip), kernel extensions need to be explicitly enabled by going into One True Recovery (1TR) mode, then downgrading to Reduced Security and ticking the box to enable kernel extensions. This section describes how to do this.

1. Select Apple menu  > Shut Down.

2. Press and hold the Touch ID or power button on your Mac until you see “Loading startup options”.

3. Click Options, then click Continue.

4. Enter the password for an administrator account.

5. In the Recovery app, choose Utilities > Startup Security Utility.

6. Select the drive where you want the app to be installed and click Security Policy.

7. Select Reduced Security and tick the "Allow kuser management of kernel extensions from identified developers" checkbox. Then click OK.
   
8. Restart your device.

Procedure

Even if the kernel extension is installed along with the Syncplicity client for macOS, the extension is not enabled until the user completes the registration process:

1. The following "System Extensions Blocked" notification pops up, if the kernel extension has not been allowed previously. Click the "Open Security Preferences" button within this notification screen.
   
2. You are automatically redirected to the "General" tab within the "Security & Privacy" screen. Unlock the "System Preferences" screen by clicking the "lock" icon and click the "Allow" button to enable Syncplicity extensions.
   
3. (Applicable to macOS 11 and above) A "Failed to load system extension" notification appears and you are prompted to restart the computer. Click the "Restart" button to restart.
   
4. The Syncplicity Mac desktop client application is launched automatically after restart, SyncDrive is mounted and you are able to continue the configuration from the same screen - "Select folders to add to this device".
5. Follow the steps and finish the configuration.

For Administrators

To simplify the initial user experience with the Syncplicity client, system administrators of large-scale Mac deployments could allow the kernel extension for all devices prior to the installation of the Syncplicity client, using their preferred MDM software.

While the exact steps may vary from one system to another, typically administrators need the following information to allow the kernel extension:

• Team ID: 9MAQ4GMJ3D
• Team Display name: Syncplicity, Inc
• Extension: io.macfuse.filesystems.fs.macfuse

Additional information for administrators is available at https://support.apple.com/en-il/HT211860 and in the documentation of your MDM system of choice.