Cannot 'Allow' Citrix system file extensions when installing CF for Mac

Cannot 'Allow' Citrix system file extensions when installing CF for Mac

book

Article ID: CTX319827

calendar_today

Updated On:

Description

  • Unable to see the “Allow” option after installation (as shown in below snippet)
Security & Privacy FileVault Firewall privacy A login password has been set for this user Change Password.„ Q Search after sleep or screen saver begins O Require passw•ord 5 minutes Show a message when the screen is locked Set L cck Yes v' Disable autornatic login Allow apps downloaded frorn: • App Store anc identified System software frorn developer "Citrix Systems, Inc." was blo&d from loading. Click the to make changes. Allow Citrix Files System Extension Citrix Files requires you to auow its system extension before it can load. Please open Security & privu•y System preference pane and all'N loading system software from • Citrix Systems. Inc.•, Orre this is done, Citrix Files will reload automatically. Open System Preferences Advanced n.
 
  • Instead, only sees this:
Introduction Licence Destination Select Installation Type Installation Summary citri* Install Citrix Files The installation was completed successfully. The installation was successful. The software was installed. Close Security & Privacy A login password has been set for this user Change Password.„ Require password mmediately C after sleep or screen saver begins Show a message when the screen is locked Set Lock Message... Disable automatic login Allow apps downloaded from: — App Store App Store and identified developers Click the lock to make changes. Advanced...
  • Uninstalling and reinstalling CF-Mac results in "Drive Unavailable" error
image.png
 

Resolution

Grab a copy of the database
  • The path is: /var/db/SystemPolicyConfiguration/ . See screenshot below and the required files:
  • image.png
  • Check if the kernel extension is allowed as shown below:
  • If it is allowed, then perform the steps highlighted below.

To fix the "Drive Unavailable" error, perform the following steps:
  1. Startup the Mac in recovery mode .
  2. Click the Utilities menu and select Terminal.
  3. Enter the following command:
    • /usr/sbin/spctl kext-consent add TEAMID
  4. Press Enter
    • Example: For Citrix the command would be: /usr/sbin/spctl kext-consent add S272Y5R93J
  5. Close the Terminal app and restart

If issue persists, Trigger the prompt by loading the kernel extension manually
sudo kextutil -t /Library/Filesystems/ctxfuse.fs/Contents/Extensions/10.12/ctxfuse.kext/
Note: Older builds (20.9 or less) can use sudo kextutil -t /Library/Filesystems/ctxfuse.fs/Contents/Extensions/10.11/ctxfuse.kext/
After running this command, open the system preferences in the security pane and see if you can approve the prompt.


While running the above command, if you encounter the "Unable to stage kext" error then perform the action items highlighted below:
image.png
  1. As suggested here , run the below command:
    • chflags restricted /Volumes/Macintosh\ HD/private/var/db/KernelExtensionManagement
  2. People who have ran into the staging error have also reported upgrading to MacOS 10.15 Catalina also fixes the issue.

Issue/Introduction

Cannot 'Allow' Citrix system file extensions when installing CF for Mac

Additional Information

Recovery Mode - https://support.apple.com/en-us/HT201314 
Kext not loading - https://github.com/pqrs-org/Karabiner-Elements/issues/2373
Powered by Wolken Software