No prompt for system extension

[JohnMacVeteran]

I have downloaded the package from the releases page and the installation went well. After starting "Red Canary Mac Monitor" there was no prompt regarding the installation of the extension. Selecting the install command in the "Security Extension" menu does nothing. I am on 13.5.2.

[Brandon7CC]

Hey @JohnMacVeteran,
Can you make sure that you've done both of these in System Settings?

• "Allow"ed the System Extension (most people forget this -- it displays directly above Accessory Security settings)
• and enabled Full Disk Access

[JohnMacVeteran]

Hi @Brandon7CC,

there is no option to do this:

[Brandon7CC]

@JohnMacVeteran thank you for providing the screenshots!

• Here's what I'm interested in now... what state is the System Extension currently in? Can you grab this for me by running systemextensionsctl list? Which state is the Red Canary Security Extension in?
  • activated waiting for user
  • or activated enabled?
• This give me a bit more information to dive into. Have you also tried installing on a non-MDM enrolled device? I'm wondering if a configuration profile is blocking the request.

Pre-install

> sudo systemextensionsctl list
0 extension(s)

Before user-allow

activated waiting for user

1 extension(s)
--- com.apple.system_extension.endpoint_security
enabled	active	teamID	bundleID (version)	name	[state]
	*	UA6JCQGF3F	com.redcanary.agent.securityextension (1.0.5/1)	Red Canary Security Extension	[activated waiting for user]

After user-allow

activated enabled

1 extension(s)
--- com.apple.system_extension.endpoint_security
enabled	active	teamID	bundleID (version)	name	[state]
*	*	UA6JCQGF3F	com.redcanary.agent.securityextension (1.0.5/1)	Red Canary Security Extension	[activated enabled]

Thank you for your patience!

[JohnMacVeteran]

Hi @Brandon7CC ,

this is the output:
systemextensionsctl list
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]

• • VBG97UB4TA com.objective-see.lulu.extension (2.5.1/2.5.1) Extension [activated enabled]

I had no chance to try the install on a non-MDM Mac so far.

[wawava]

Hi @Brandon7CC i also have this promble on mac os 14.2,i use brew install mac-monitor and the situtation is same to John,when i run sudo systemextensionsctl list can't find com.redcanary.agent.securityextension

[wawava]

@JohnMacVeteran block by some antivirus software,so you can test uninstall some antivirus software

[teemomiko]

We use (vmware workspace one) to management mac , when i install monitor , extension still not found . How can i fix it ? Pls help me to fix it , 3ks .

[changheluor007]

Apple M3 Pro
mac sequioa: 15.1.1 (24B91)
Also encountered this problem

3 extension(s)
--- com.apple.system_extension.network_extension (Go to 'System Settings > General > Login Items & Extensions > Network Extensions' to modify these system extension(s))
enabled active teamID bundleID (version) name [state]

• • NXELXU5YLW com.initex.proxifier.v3.macos.ProxifierExtension (3.11.0/3.11.0) ProxifierExtension [activated enabled]
• • VBG97UB4TA com.objective-see.lulu.extension (2.6.3/2.6.3) Extension [activated enabled]
    --- com.apple.system_extension.endpoint_security (Go to 'System Settings > General > Login Items & Extensions > Endpoint Security Extensions' to modify these system extension(s))
    enabled active teamID bundleID (version) name [state]
  • UA6JCQGF3F com.redcanary.agent.securityextension (1.0.5/1) Red Canary Security Extension [activated waiting for user]