System Extension Blocked - but can't allow extension

I installed macOS 10.13 High Sierra yesterday. This morning, when trying to boot up my VMWare for the first time since the install, I got the following error message:


"System Extension Blocked

A program tried to load new system extension(s) signed by "VMWare". If you want to enable these extensions, open Security & Privacy System Preferences"


The problem is that when I go to Security & Privacy, there is no option to 'Allow' the extension. I have read that this was a known bug in the beta versions of High Sierra, but surely this was fixed before release!?


I am also now getting exactly the same problem with my Symantec anti-virus. Same error message and still no option option to 'Allow' the extension.


I would be grateful to anyone that has been able to resolve this.

MacBook Pro with Retina display, macOS High Sierra (10.13)

Posted on Sep 27, 2017 1:24 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 13, 2017 10:17 AM

There is a workaround for this. It isn't a great workaround, security-wise, but it does get you back to the behavior of macOS 10.12. Basically, you can turn off the security feature requiring user approval of Kernel Extensions.


First, boot into Recovery Mode by rebooting and pressing and holding command-R as soon as you see the Apple logo. On my machine, I had to hold command-R for quite a while, at least 60 seconds.


Eventually you will see a screen that gives you a couple of options, including reinstalling or running Disk Utility. If you look at the top of the screen, where the Apple menu would ordinarily be, you will see a "Utilities" drop-down menu. Click on that and select Terminal. A window will open up that allows you to type text-based terminal commands.


You will see a "$" prompt in the terminal window. Type the following:


spctl kext-consent disable


then press Return. You should see:


Kernel Extension User Consent: DISABLED

Please restart for changes to take effect.


Then reboot your Mac, and you should be good. You will no longer see the notification panes telling you a Kernel Extension was blocked; they will all be automatically allowed, just as they were in macOS 10.12.


I would recommend waiting until 10.13.1 or 10.13.2 to see if the issue gets fixed, and then undoing this fix by repeating the same steps, but typing


spctl kext-consent enable


instead.


For more information, see the following website:


User Approved Kernel Extension Loading… – Pike's Universum

113 replies

Oct 3, 2017 6:33 AM in response to RayZn

Any word on this yet?

I spent over an hour on the phone with Apple Care yesterday, the two guys who tried to help me were stumped. They hadn't encountered this issue before, had some great ideas on the cause and possible solutions, but we were unable to fix it.

I ended up setting up some steps with the second line guy, I would go through and report back with the results.


We are pretty sure the MacOS installation is messed up in some way, which is weird since I already reinstalled it through a recovery boot, if a bit fell over during download or installation, a reinstall should have fixed it, but it didn't.

So I grabbed a USB hard drive, and installed MacOS on that, which works flawlessly. No issues whatsoever.

The next step I am currently working on is putting back a Time Machine back-up through recovery boot, to see if that fixes things.

If that doesn't work the last option the guys saw was to just do a clean install and take all my files out of the back-up and put them back manually.


I'm currently working on the back-up restore part, but when I wanted to start on that I came across another issue. Time Machine hasn't been making back-ups since High Sierra was installed! It couldn't. If I told it to make a back-up it would start the process, say "preparing" and hang there. I was also unable to open the back-up folder on the Time Capsule, I could connect to the Time Capsule, saw the back-up folder for my iMac, but opening it was impossible.


So I had to find a large enough USB Hard drive, spread all the files on it over my macbook and a few smaller drives so I can use this large one for a new full 1TB back-up, which has been running for over 7 hours and is about halfway done :/

So I'm hoping to restore that back-up overnight and wake up to a fully functioning machine, but I am afraid it won't do anything and I'll have to go the nuclear route tomorrow and do a clean install...


Any updates on your situations would be great, we might be able to help each other out.

Oct 3, 2017 2:40 PM in response to robGTR

Good morning Rob,


I have upgraded my VMWare Fusion to 10.1, and created a new VM with a fresh install of OS X 10.13, and I did receive the message re: Extensions you are posting about after installing VMWare tools. However the alert was generated by the guest OS inside VMWare Fusion and not the Host OS. I went into System Preferences / Security on the guest OS and the extension was listed to allow.


What version of VMWare Fusion are you running?

What guest OS are your running inside VMWare Fusion

Is your version of VMWare Fusion up to date?

After updating VMWare fusion, is the version of VMWare Tools up to date on your GuestOS?

Have you contacted VMWare support?

Oct 5, 2017 6:50 AM in response to robGTR

I have a similar issue. The difference in my situation is that the Allow button (for the extension) is there, but clicking it did nothing. The message, regarding the blocked Vmware extension is still displayed.


I also did a restore of High Sierra, have uninstalled VMware 10.0.1 (and remove all preferences and cache files) and reinstalled several times.


No luck. I also contacted Apple support. We tried several things, including copying the kext files into the system extensions directory. Nothing worked.


The only recommendation I have from VMware is to disable SIP. Currently I am not willing to do that.


Hoping a solution presents itself soon.


Mike

Sep 28, 2017 12:06 PM in response to robGTR

I spent a few hours with tech-support because I have this very same problem. Prevents me from seeing my 24 TB Thunderbolt 3 Lacie Big 6storage among other things because I cannot load the necessary extension since the option to allow does not appear. Affects sound recording too in Screenflow 7.1 (Cannot load computer audio driver). The senior support tech and I were unable to solve the problem and they will get back to me on Friday with an update (case ID ***********). At least I know I am not alone in this. Very frustrating.

<Personal Information Removed by Host>

Sep 27, 2017 2:43 AM in response to RayZn

Thank you very much indeed for sharing.


Wow. Incredible really that (a) this bug was not fixed before release, and (b) the senior tech people couldn't fix it for you. This is a very serious one as it is preventing the normal operation of the Mac. I would be grateful if you could please share details of the fix, if and when you get them!

Oct 3, 2017 9:10 AM in response to RoelVeldhuyzen

Hi RayZn,


Thanks for the follow up and for the the detailed explanation of the steps you have taken with Apple to fix this.


Despite talking to two senior advisors and having input from an engineer, I am basically getting nowhere. I had an almost laughable reply today from the engineer who said they couldn't support whatever problem I was having with VMWare. I had to point out yet again that the issue is with OS 10.13 which is blocking extensions and not letting me allow them. Incredible and infuriating.


From what you describe, this doesn't look easily fixable at all. I really hope it is as the thought of a clean install sends shivers down my spine. I'll let you know if I actually manage to make any progress.


Cheers, Rob

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

System Extension Blocked - but can't allow extension

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.