Tuxera ntfs for mac kernel extension needs approval

From my Support searches, this is administered through either Apple School Manager or Apple Business Manager programs. We are lowly end users and are not qualified to answer inquiries about advanced Apple programs, and there is not a forum section for ASM or ABM issues.

If your employer has a designated administrator (other than you!) you should start there. If you are the admin, your documentation should have support contact information. You can also scan this list of support articles about kernel extension approval:

https://support.apple.com/kb/index?q=kernel+extension+needs+approval&src=globalnav_support&locale=en_US&type=organic&page=search

Timothy Holt wrote:

I uninstalled the app completely. And reinstalled. Rebooted etc.

iMac 27″ 5K, macOS 10.14

Can you verify you are running MacOS 10.14.x as posted... in the Mojave community forum...

> Security& Privacy>Privacy >Allow Full Disk Access

Change Security & Privacy General preferences on Mac ...

Make sure you've downloaded the latest version from their site. It only offered full Catalina support a few months ago so an older/existing installer should be avoided ((but all of this is still valid even if you are in fact running Mojave as your profile indicates).

These steps address below address several things all at once, any one of which could be the problem:

• that Catalina doesn't always show the allow properly the first time
• that if System Preferences is currently open it won't update
• that Catalina doesn't always pick things up properly trying to catch an app launched through the GUI that needs security permission, but it's much better about picking that up when launched from terminal.

So with the latest installer download, open the tuxerantfs_2019.dmg file that shows the icons for Installing Tuxera (and for the Tuxera User Manual). Leave that window open but don't click on anything.

Open up a Terminal window through either Spotlight or by going to Finder > Applications > Utilities > Terminal

Copy and paste the following line into the Terminal window and press enter:

open /Volumes/Microsoft\ NTFS\ by\ Tuxera\ 2019/Install\ Tuxera\ NTFS.app 

The installer should launch and after you accept the license, etc., it should offer to bring up the Security preferences. Now, if you don't see Tuxera listed there in Security & Privacy waiting for you (to Unlock the padlock and click the Allow button) then close the Security & Privacy window and click the "Open Security preferences..." button again in the Tuxera installation wizard window again. And the installer window itself should show you a spinning circle waiting until it gets approved. If it doesn't show up the first time, it should show up this second time.

Did this work for you?

That's some good information! However to do it that route you need one crucial piece: the ID of the Tuxera KEXT file. I went ahead and pulled that up for you in case you don't actually have it:

/usr/sbin/spctl kext-consent add PPNVCC9Z68

Once you enter that line you should then be able to restart and the Tuxera KEXT should be approved now. I don't know if it will all immediately work or if you'll need to re-run the installer or not.

Let me know if you're all set or if this doesn't work.

Got this exact same problem with 2020-RC, no matter how I dance around installer/removing kexts, the approval just never appears.. the whole kext system security additions seem really badly implemented.

edit: actually seems mine is different, the extension is actually approved, but doesn't load to other reasons:

 "Error occurred while building a collection: in '/Library/StagedExtensions/Library/Extensions/spl.kext/Contents/PlugIns/KernelExports.kext/KernelExports' missing __TEXT segment"

I had a similar issue with the driver for the Intel Power Gadget a while back. I had to reboot the Mac so when I launch the Security System Preferences I now had the button to approve the driver. I may have had to launch the app (not the installer) to have it approve it or maybe it just worked on the reboot (it was several years ago).

I also had another case where I used the command line utility for Gatekeeper to see if it could provide more information on what was happening. Unfortunately everything "seemed" to work fine with no errors, but the driver/app (I forget which) still wouldn't run. I even used the Gatekeeper command line utility to remove the approval so I could try again plus I tried deleting preference files associated with Gatekeeper, but to no avail. I had to reinstall macOS to fix the issue.

Edit: It would be easier if you just let macOS manage the external drive(s). If you need to share it with Windows, then use exFAT. Any time you have a third party proprietary driver you are going to potentially encounter issues anytime the OS is updated.

after run "/usr/sbin/spctl kext-consent add PPNVCC9Z68" under normal and recovery mode , I have got this issue as below, how can I deal with that?

objc[960]: Class SPExecutionPolicy is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class AppWrapper is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class AppWrapperPolicyResult is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class AppWrapperPolicy is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class SPLog is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class MIS is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class SPExecutionHistoryItem is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class SPExecutionPolicyItem is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class SPDeveloperPolicy is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

objc[960]: Class GKScanResult is implemented in both /System/Library/PrivateFrameworks/SystemPolicy.framework/Versions/A/SystemPolicy and /usr/sbin/spctl. One of the two will be used. Which one is undefined.

spctl: failed to store new configuration.

Unlock the pad lock to make changes.

Mornin' Leroy,

I interpreted this as: the image is from a support example OP found, and he is saying the option shown in the example image is not present on his computer.

Timothy, can you clarify?

The dialog is available for a short period. About 30 min. The kext must be uninstalled and installed again to make it appears.

WD

OK, on investigating what spl.kext was, seems an old leftover remnant of old zfs driver install.. removed those, and everything back to working..