Are Your Users Receiving Legacy System Extensions Alerts?

As of macOS Catalina 10.15.4, Apple has begun alerting users when their Mac detects a Kernel Extension (KEXT) is leveraging deprecated KPIs (Kernel Programming Interfaces). If you haven’t seen this alert yet, you can look at a picture of it below, stating that the loaded KEXT will be “incompatible with a future version of macOS.” Image source: support.apple.com In this quick article, we’re going to discuss what these alerts mean for the future of KEXTs, how System Extensions factor in, …

Keep Reading

Add Devices to Apple Business Manager Using Apple Configurator 2

Starting with iOS 11, all iPhone, iPad, and Apple TV (Gen 4+) devices can be added to Apple Business Manager – regardless of how they were purchased – using Apple Configurator 2.5 or later. That means even if you didn’t buy your devices directly from Apple, a Device Enrollment enabled reseller, or an authorized cellular carrier, you can still add them to your Apple Business Manager account and assign them to your mobile device management (MDM) solution using Apple Configurator …

Keep Reading

Guide for Apple IT: Leveraging MDM for Remote Work

As more companies begin letting their employees work from home, device security and productivity have become key considerations for IT. More than figuring out how to encourage a smooth workflow, IT has to guard company data from the unique security threats posed by the remote work environment. In this guide, we’re going to walk you through how, with the right MDM solution (Mobile Device Management), remote work can be achieved securely and productively. Here’s what we’ll cover: Zero touch deployment …

Keep Reading

Guide for Apple IT: Zero Touch Deployment for Mac

Keeping up to date with your company’s cybersecurity needs is a never-ending task. New cyber threats are always popping up – and so are new tools to combat them. One of the more recent tools that have gained traction among businesses is zero touch deployment. More than just a buzzword, this deployment method offers businesses higher levels of security and efficiency while setting employees up with new devices. Essentially, zero touch is an automated deployment strategy that enrolls and secures …

Keep Reading

Introducing Auto Apps, SCEP Profile, and More

The Kandji team is excited to announce Auto Apps, a library of applications that Kandji pre-packages, hosts, and automatically patches. We also released several other updates to provide IT teams with the most modern Apple device management experience, such as new Profiles (SCEP, AirPlay Security, Login Window), Parameters (Set Computer Name), Global Profile Variables, and more. In case you missed it, we also released tvOS support and new assignment workflows last month. Auto Apps Auto Apps are designed to streamline …

Keep Reading

Guide for Apple IT: Device Enrollment (UAMDM, TCC, and Device Supervision)

For any business that runs on Apple, choosing the right device enrollment method is essential to speed up onboarding and provide the right balance between privacy (for corporate and personal data) and management capabilities. In this guide, we’re going to take a look at three device enrollment methods that Apple offers, breaking down their strengths, weaknesses, and ideal use cases. We’ll also discuss how they relate to important privacy and policy topics like user approved MDM (UAMDM) status, “Transparency, Consent, …

Keep Reading

Guide for Apple IT: Threat Detection and Apple’s New EndpointSecurity Framework

In macOS 10.15 Catalina, Apple released new frameworks that have big implications for the future of macOS threat detection and the development of security solutions: the EndpointSecurity framework and the SystemExtension framework. Beyond expanding the safety and security of macOS, Apple is using these frameworks as userspace alternatives to KEXTs (Kernel Extensions). Moving forward, if a Kernel Extension feature has a System Extension equivalent, the Kernel Extension feature is considered deprecated and the developer should work to migrate those features …

Keep Reading