Learn about specifics of VFS on Apple ARM platforms (M1) regarding Kernel extensions (KEXT). 

Introduction

The new Apple ARM platform does not allow Kernel extensions (KEXT) by default. This change was introduced by Apple due to security concerns. The censhare Virtual File System (VFS) uses KEXT to synchronize asset files that are edited in the censhare Client with the censhare Server and vice versa. To use the censhare VFS, you must enable KEXT on a client computer

Requirements

  • VFS 2.0
  • A compatible censhare version. See censhare clients requirements.

  • macOS Big Sur 11.3.x or 11.4.x

    The option to enable KEXT on Apple ARM platforms might be deprecated in future versions of macOS. If you want to install the censhare Clients with VFS on newer macOS versions, make sure that KEXT can be enabled before you install.

  • An Apple ARM architecture computer (currently Apple M1)

Prerequisites

No VFS KEXT is yet installed. See Check what is installed.

If you have previously installed the VFS KEXT, you must uninstall them before you continue. Otherwise, the KEXT will not work correctly with the censhare VFS! For a step by step guide, read the section Uninstall Kernel extension at the end of this article.


Prepare - Check what is installed

To check if you have VFS KEXT installed, do one of the following:

  • Open the Apple System Information: Press and hold the Option key and choose Apple menu  > System Information. Check under Software > Extensions.
  • For latest installations, you can also execute:
kextstat | grep -v com.apple
CODE


Step 1 - Allow Kernel extensions

  1. Shut down the computer.
  2. Start the computer and hold the power button pressed until the Loading startup options display, then release the power button. The computer is now booting in recovery mode.

  3. Select Options and then Continue.

    If the disk drive is encrypted with FileVault, you are asked to select an admin user and enter the password to decrypt the disk drive!

  4. Open the Utilities from the top menu and select Startup Security Utility.
  5. Select Macintosh HD and click Security Policy.
  6. Select Reduced Security.
  7. Select Allow user management of kernel extensions from identified developers.
  8. Click OK.
  9. Enter the admin password.
  10. Open the Apple menu and select Restart.

Step 2 - Install censhare Client

  1. Download the censhare Client installer disk image.
  2. Double click the installer package file (.dmg).
  3. Double click package.
  4. Click Continue, then again click Continue, and finally  click Install.
  5. Enter the admin password.
  6. In the dialog, click OK to confirm that the application can access the System Events.app.
  7. If the installer informs that a system extension dialog was installed, click OK .
  8. In System Extension Updated dialog, click OK. The Security & Privacy preferences of the System Preferences open automatically (if not, open the System preferences and select Security & Privacy preferences).
  9. In the bottom left corner of the window, click the lock icon to unlock the preferences. Enter the admin password to confirm.
  10. Next to Some system software requires your attention before it can be used click Details.
  11. Click OK.
  12. Click Restart.

Result

The censhare Client with VFS works on the computer. The censhare Client connects to the censhare Server. Files can be edited and synchronized with the censhare Server.

Uninstall Kernel extension

Only do this, if you have previously installed KEXT on the client computer. The installation of the censhare Client with VFS 2.0 described above only works if all previously installed KEXT were deinstalled!


  1. Shut down all censhare Clients and InDesign that are running on the computer.
  2. Download the uninstall.sh script and store it on the computer that you want to set up.

  3. Open the Terminal and make the script executable with the following command:

    cd <the-directory-where-you-saved-the-script>
chmod a+x Uninstall.sh
    BASH

  4. Execute the script:

    ./Uninstall.sh
    BASH

    You are asked to enter your admin password.

  5. Shut down the computer.
  6. Start the computer and hold the power button pressed until the Loading startup options display, then release the power button. The computer is now booting in recovery mode.
  7. Select Options and then Continue.

  8. Open the Utilities menu and select Startup Security Utility.

    If the disk drive is encrypted with FileVault, you are asked to select an admin user and enter the password to decrypt the disk drive!

  9. Select Macintosh HD and click Security Policy.
  10. Select Full Security.
  11. Enter the admin password.
  12. Open the Startup Disk menu and select Quit Startup Disk.
  13. Open the Utilities menu and select Terminal.

  14. In the terminal window, enter the following command and run it:

    kmutil trigger-panic-medic --volume-root /Volumes/Macintosh\ HD
    BASH

    The computer prompts the command with ...All third party kexts have been unapproved and uninstalled from /Volumes/Macintosh HD.

  15. Open the Apple menu and select Restart.
  16. When the Panic Medic Boot dialog displays, click OK. This dialog tells the user that all third-party extensions were disabled and must be re-enabled in the Security Privacy section in the System Preferences.
  17. The existing KEXT were now successfully uninstalled. To continue, follow Step 1 - Allow Kernel extensions above.