System Extension Blocked - but can't allow extension

I installed macOS 10.13 High Sierra yesterday. This morning, when trying to boot up my VMWare for the first time since the install, I got the following error message:


"System Extension Blocked

A program tried to load new system extension(s) signed by "VMWare". If you want to enable these extensions, open Security & Privacy System Preferences"


The problem is that when I go to Security & Privacy, there is no option to 'Allow' the extension. I have read that this was a known bug in the beta versions of High Sierra, but surely this was fixed before release!?


I am also now getting exactly the same problem with my Symantec anti-virus. Same error message and still no option option to 'Allow' the extension.


I would be grateful to anyone that has been able to resolve this.

MacBook Pro with Retina display, macOS High Sierra (10.13)

Posted on Sep 27, 2017 1:24 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 13, 2017 10:17 AM

There is a workaround for this. It isn't a great workaround, security-wise, but it does get you back to the behavior of macOS 10.12. Basically, you can turn off the security feature requiring user approval of Kernel Extensions.


First, boot into Recovery Mode by rebooting and pressing and holding command-R as soon as you see the Apple logo. On my machine, I had to hold command-R for quite a while, at least 60 seconds.


Eventually you will see a screen that gives you a couple of options, including reinstalling or running Disk Utility. If you look at the top of the screen, where the Apple menu would ordinarily be, you will see a "Utilities" drop-down menu. Click on that and select Terminal. A window will open up that allows you to type text-based terminal commands.


You will see a "$" prompt in the terminal window. Type the following:


spctl kext-consent disable


then press Return. You should see:


Kernel Extension User Consent: DISABLED

Please restart for changes to take effect.


Then reboot your Mac, and you should be good. You will no longer see the notification panes telling you a Kernel Extension was blocked; they will all be automatically allowed, just as they were in macOS 10.12.


I would recommend waiting until 10.13.1 or 10.13.2 to see if the issue gets fixed, and then undoing this fix by repeating the same steps, but typing


spctl kext-consent enable


instead.


For more information, see the following website:


User Approved Kernel Extension Loading… – Pike's Universum

113 replies

Apr 26, 2018 7:19 AM in response to maxhhh

Hi Max,

Apple doesn't state it's secure. They have it disabled for a reason, such as installing third party security software which usually embeds other unnecessary and/or harmful malware....the third party software, for example, typically doesn't play well with Macs due to the design & especially with the heightened security within High Sierra. I would never put Norton, AVG, Avast, etc on my Mac. I've vseen the effects of such on Macs & it's not good. However, I'd feel comfortable with certain third party peripherals as long as there's no additional software from sources I don't trust, etc.

An external mouse that's compatible with the Mac however is usually fine, as is the case here.. it's just the third party software that sometimes accompanies it, that sets off a flag to the system or simply the fact that it's by an unidentified developer or a third party.

Thus, the workaround that a user posted here, assists in this manner.

Take care

Apr 26, 2018 6:40 PM in response to Daniel Schlaug

This worked beautifully for me even on the same-desktop use where it was otherwise not working. (I'd disabled everything I could find such as BetterTouchTool and it still wasn't working.)


I found that if I moved the system window to the very top left of the screen the click point needed was:

tell application "System Events" to click at {576, 458}


Pro tip: I got this location by pressing Command-Control-Shift-4 which triggers the system to prepare to take a screen shot. Your cursor will turn to crosshairs with the pixel point you need shown with it.


Thanks Daniel for the tip off on this one!

May 10, 2018 7:57 AM in response to robGTR

Like everyone I have been searching for a solution. I have a new iMac Pro I got back in December. Has macOS High Sierra 10.13.4.


When I tried to click allow for VMWare Fusion no response. Not in a Remote Desktop.


Out of desperation I hooked up a wired mouse and it worked. I was able to click the allow button with the cheap wired mouse.


Hope this helps somebody. So frustrating to be running into unexplained issues like this during the past few years on new macOS releases.

Jun 20, 2018 11:23 AM in response to robGTR

I have this problem too with a Realtek driver. When pressing the "allow" button nothing happens.


I'm on a fresh 10.13.4 High Sierra install from USB using 1.0.1.5 drivers from Realtek.


There is nothing installed that would modify the mouse behavior, but I've tried using a wired USB mouse which didn't work either.


I've tried booting in safe mode, but the driver does not load so I can't click on the "allow" button.

Jun 23, 2018 8:58 AM in response to Daniel Schlaug

This worked perfectly for me! Thanks so much. I had to allow the Script Editor to "control my computer", also via System Preferences, before it worked. But, luckily, you *can* enable that in a VNC session. (The request to enable this pops up automatically. It says something like, "Application so-and-so has requested to control your computer...")


Rather than trying to find out the right coordinates to click, I simply positioned the System Preference window such that the "Allow" button was at the bottom right corner of the screen (bottom and right edge lined up with the screen's edge). Knowing my screen resolution (1920x1080) I simply told the script to click a little to the right and a little further up (1900, 1070). Worked like a charm!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

System Extension Blocked - but can't allow extension

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.