Mac Os Unsupported
The first release of the new OS — Mac OS X Server 1.0 — used a modified version of the Mac OS GUI, but all client versions starting with Mac OS X Developer Preview 3 used a new theme known as Aqua. Aqua was a substantial departure from the Mac OS 9 interface, which had evolved with little change from that of the original Macintosh operating. Once the OS is prepared to be installed, click 'Restart' and you should be on for dozens of automatic reboots. Wait for the installation to proceed, give it time.Some time later, you should now have macOS Big Sur beta1 installed on your obsolete Mac. — At this point your Wi-Fi should or should not be working — My Wi-Fi is working.
This advisory describes the changes and steps administrators can take to deploy Mac Connector 1.14.
The most common issues are with unsupported sound cards, video cards, Bluetooth, and Airport cards. The most success has been achieved with machines that have an ATI Graphics card/chip-set. Graphics acceleration is unavailable unless you have a graphics chip-set that is officially supported under Mac OS 9. MacOS 10.13 High Sierra - End of Life Support Ending January 31, 2021 Updated 11/18/20. On November 12, 2020, Apple released macOS 11, Big Sur. In keeping with Apple's release cycle, we anticipate macOS 10.13 High Sierra will no longer receive security updates starting in January 2021. Mac OS 9.2 (Unsupported G4s version) on iBook G4 (Early/Late 2004) Started by Raven4522. 3 Replies 8064 Views / 0 Likes March 13, 2020, 04:32:57 PM by SabMac.
Mac Os Unsupported Epic Games
The Mojave 10.14.1 update does NOT install properly on unsupported machines, and could result in an unbootable OS. If you want to install the 10.14.1 update (and are not currently running 10.14.1), perform the following steps. Jun 22, 2020 A: If your Mac had official support in macOS Catalina, they will likely be able to be patched to run Big Sur with minimal issues. As of writing, only WiFi appears to be unstable, and even then, not for all users. If your Mac was unsupported before the release of macOS Catalina, support remains to be seen as graphics acceleration may not be.
Mac Connector version 1.14 introduces a number of changes that require user attention. Most notably, this Connector release includes changes to full disk access approvals and adds support for macOS 11 (Big Sur) System Extensions.
Since the inital 1.14 launch, compatibility issues have been discovered with 3rd party applications on macOS 10.15 Catalina when system extensions are in use. Apple will be addressing these issues in future releases of macOS 11 but will not be fixing these issues in macOS 10.15. Consequently, starting with version 1.14.1, the Mac Connector will use legacy kernel extensions instead of system extensions on all versions of macOS 10.15.
Mac Connector 1.14 is required to ensure endpoint protection on macOS 11. Older Mac Connectors will not work on this version of macOS.
It is highly recommended to deploy the Mac Connector with an MDM profile that grants the required approvals. MDM profiles must be installed before installing or upgrading the Mac Connector to ensure the needed permissions are recognized. Refer to the Known Issues section later in this document if MDM cannot be used.
Minimum OS Requirements
AMP for Endpoints Mac Connector 1.14.0 supports the following macOS versions:
- macOS 11, using macOS system extensions.
- macOS 10.15.5 and later, using macOS system extensions.
- macOS 10.15.0 through macOS 10.15.4, using macOS kernel extensions
- macOS 10.14, using macOS kernel extensions.
AMP for Endpoints Mac Connector 1.14.1 supports the following macOS versions:
- macOS 11, using macOS system extensions.
- macOS 10.15 using macOS kernel extensions.
- macOS 10.14, using macOS kernel extensions.
For deployments that include endpoints running older macOS versions, consult the OS Compatibility Table for compatible Mac Connector versions.
Important Changes
Mac Connector 1.14 introduces important changes in three areas:
- Approving AMP macOS Extensions to load
- Full Disk Access
- New Directory Structure
Approving Mac Connector macOS Extensions
The Mac Connector uses either System Extensions or legacy Kernel Extensions to monitor system activities, depending on the macOS version. On macOS 11, System Extensions replace the legacy Kernel Extensions that are unsupported in macOS 11. User approval is required on all versions of macOS before either type of extension is allowed to run. Without approval, certain Connector functions such as on-access file scan and network access monitoring will be unavailable.
Macos catalina for macbook pro 2015. Mac Connector 1.14 introduces two new macOS system extensions:
- An Endpoint Security extension, named AMP Security Extension, to monitor system events
- A Network Content Filter extension, named AMP Network Extension, to monitor network access
The two legacy Kernel Extensions, ampfileop.kext
and ampnetworkflow.kext
, are included for backwards compatibility on older macOS versions that don't support the new macOS System Extensions.
The following approvals are required for macOS 11** and later:
- Approve AMP Security Extension to load
- Approve AMP Network Extension to load
- Allow AMP Network Extension to filter network content
** Mac Connector version 1.14.0 also required these approvals on macOS 10.15. These approvals are no longer required on macOS 10.15 when running Mac Connector 1.14.1 or later.
The following approvals are required for macOS 10.14 and macOS 10.15:
- Approve AMP Kernel Extensions to load
These approvals can be granted using the macOS Security & Privacy Preferences on the endpoint, or by using Mobile Device Management (MDM) profiles.
Approving Mac Connector macOS Extensions at the Endpoint
System and Kernel extensions can be approved manually from the macOS Security & Privacy Preferences pane.
Approving Mac Connector macOS Extensions using MDM
NOTE: macOS Extensions cannot be retroactively approved via MDM. If the MDM profile is not deployed prior to installing the Connector then the approvals will not be granted and additional intervention will be required in one of the following forms:
1. Manual approval of the macOS Extensions on endpoints that had the management profile deployed retroactively.
2. Upgrading the Mac Connector to a newer version than the one currently deployed. Endpoints that had themanagement profile deployed retroactively will recognize the management profile after upgrade and gain approval once the upgrade completes.
AMP extensions can be approved using a management profile with the following payloads and properties:
Payload | Property | Value |
SystemExtensions | AllowedSystemExtensions | com.cisco.endpoint.svc.securityextension, com.cisco.endpoint.svc.networkextension |
AllowedSystemExtensionTypes | EndpointSecurityExtension, NetworkExtension | |
AllowedTeamIdentifiers | DE8Y96K9QP | |
SystemPolicyKernelExtensions | AllowedKernelExtensions | com.cisco.amp.fileop, com.cisco.amp.nke |
AllowedTeamIdentifiers | TDNYQP7VRK | |
WebContentFilter | AutoFilterEnabled | false |
FilterDataProviderBundleIdentifier | com.cisco.endpoint.svc.networkextension | |
FilterDataProviderDesignatedRequirement | anchor apple generic and identifier 'com.cisco.endpoint.svc.networkextension' and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP) | |
FilterGrade | firewall | |
FilterBrowsers | false | |
FilterPackets | false | |
FilterSockets | true | |
PluginBundleID | com.cisco.endpoint.svc | |
UserDefinedName | AMP Network Extension |
Full Disk Access
MacOS 10.14 and later require approval before an application can access parts of the filesystem that contain personal user data (e.g. Contacts, Photos, Calendar, and other applications). Certain Connector functions such as on-access file scan will be unable to scan these files for threats without approval.
Previous Mac Connector versions required the user to grant Full Disk Access to the ampdaemon
program. Mac Connector 1.14 requires Full Disk Access for:
- 'AMP for Endpoints Service' and
- 'AMP Security Extension'
The ampdaemon
program no longer requires Full Disk Access starting with this new Mac Connector version.
Full Disk Access approvals can be granted using the macOS Security & Privacy Preferences on the endpoint, or by using Mobile Device Management (MDM) profiles.
Approving Full Disk Access at the Endpoint
Full Disk Access can be approved manually from the macOS Security & Privacy Preferences pane.
Approving Full Disk Access Using MDM
NOTE: macOS Extensions cannot be retroactively approved via MDM. If the MDM profile is not deployed prior to installing the Connector then the approvals will not be granted and additional intervention will be required in one of the following forms:
1. Manual approval of the macOS Extensions on endpoints that had the management profile deployed retroactively.
2. Upgrading the Mac Connector to a newer version than the one currently deployed. Endpoints that had the management profile deployed retroactively will recognize the management profile after upgrade and gain approval once the upgrade completes.
Full Disk Access can be approved using a management profile's Privacy Preferences Policy Control payload with a SystemPolicyAllFiles property with the following two entries, one for the AMP for Endpoints Service
and one for the AMP Security Extension
:
Description | Property | Value |
AMP for Endpoints Service | Allowed | true |
CodeRequirement | anchor apple generic and identifier 'com.cisco.endpoint.svc' and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP) | |
Identifier | com.cisco.endpoint.svc | |
IdentifierType | bundleID | |
AMP Security Extension | Allowed | true |
CodeRequirement | anchor apple generic and identifier 'com.cisco.endpoint.svc.securityextension' and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP) | |
Identifier | com.cisco.endpoint.svc.securityextension | |
IdentifierType | bundleID |
If your deployment includes computers running AMP Connector version 1.12.7 or older, the following additional entry is still required to grant full disk access to ampdaemon
for those computers:
Description | Property | Value |
ampdaemon | Allowed | true |
CodeRequirement | identifier ampdaemon and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = TDNYQP7VRK | |
Identifier | /opt/cisco/amp/ampdaemon | |
IdentifierType | path |
New Directory Structure
Install Macos Mojave On Unsupported Mac
Mac Connector 1.14 introduces two changes to the directory structure:
- The Applications directory has been renamed from
Cisco AMP
toCisco AMP for Endpoints
. - The command-line utility
ampcli
has been moved from/opt/cisco/amp
to/Applications/Cisco AMP for Endpoints/AMP for Endpoints Connector.app/Contents/MacOS
. The directory/opt/cisco/amp
contains a symlink to theampcli
program at its new location.
The complete directory structure for the new AMP Connector is as follows:
Known Issues with macOS 11.0 and Mac Connector 1.14.1.
- Guidance for fault 10, 'Reboot required to load kernel module or system extension,' may be incorrect if four or more Network Content Filters are installed on the computer. Refer to the AMP For Endpoints Mac Connector Faults article for more details.
Known Issues with macOS 10.15/11.0 and Mac Connector 1.14.0.
- Some faults raised by the Mac Connector may be raised unexpectedly. Refer to the AMP For Endpoints Mac Connector Faults article for more details.
- Fault 13, Too many Network Content Filter system extensions, may be raised after upgrading. Rebooting the computer will resolve the fault in this situation.
- Fault 15, System Extension requires Full Disk Access, may be raised after reboot due to a bug in macOS 11.0.0. This issue is fixed in macOS 11.0.1. The fault can be resolved by re-granting full disk access in the Security & Privacy pane in macOS System Preferences.
- During installation, the Security & Privacy pane may display 'Placeholder Developer' as the application name when granting permission for the Mac Connector system extensions to run. This is due to a bug in macOS 10.15. Check the boxes beside 'Placeholder Developer' to allow the Mac Connector to protect the computer.
- The
systemextensionsctl list
command can be used to determine which system extensions are awaiting approval. System extensions with the state[activated waiting for user]
in this output are displayed as 'Placeholder Developer' in the macOS preferences page shown above. If more than two 'Placeholder Developer' entries are showin in the above preferences page, uninstall all software that uses system extensions (including the Mac Connector) so that no system extensions are awaiting approval, and then reinstall the Mac Connector.
The Mac Connector sysem extensions are identified as follows:- The Network Extension is shown as
com.cisco.endpoint.svc.networkextension
. - The Endpoint Security extension is shown has
com.cisco.endpoint.svc.securityextension
.
- The Network Extension is shown as
- The
- During install, the prompt to allow the Mac Connector's Content Filter to monitor network traffic may display '(null)' as the application name. This is caused by a bug in macOS 10.15. The user needs to select 'Allow' to to ensure protection of the computer.
If the prompt was dismissed by clicking 'Don't Allow' it can be displayed again by clicking the AMP Agent menulet icon in the menu bar and selecting 'Allow Network Filter.'
Once enabled, the AMP Network Extension filter will be listed in the Network Preferences page. - On macOS 11, when upgrading from Mac Connector 1.12 to Mac Connector 1.14, Fault 4, System Extension Failed to Load, may be raised temporarily while the Connector is transitioning from the kernel extensions to the new system extensions.
Revision History
Dec 1, 2020
- Mac Connector 1.14.1 no longer uses system extensions on macOS 10.15.
- Additional guidance on using terminal check which 'Placeholder Developer' System Extensions are awaiting approval when using Mac Connector 1.14.0.
Nov 9, 2020
- Corrected bundle ID in full disk access CodeRequirement MDM payload.
Nov 3, 2020
Macos 10.14 Mojave On Unsupported Macs
- Release date for 1.14.0 Mac Connector is November 2020.
- The 1.14.0 Mac Connector will use System Extensions starting with macOS 10.15.5. Previously this was 10.15.6.
- Added Known Issues section.
- Updated directory structure outline.
Welcome to Mr. Macintosh.com. If you are part of one of the following groups, Mac Admins, Mac Support, Mac Developer, Mac in Education or Mac User, then this is the site for you. Each group is important, yet has different needs.
- Mac Admin = This tag is for anyone in who is in Macintosh Architecture, Engineering, System Administration, or MDM Administrators.
- Mac Support = Someone who supports or fixes Macintosh issues. This group includes anyone who works in a Macintosh Helpdesk role. You could be level 1-3 or even a Subject Matter Expert (SME) or Team Lead or Management.
- Mac in Education = This group is for anyone working in K-12 or Higher Education. You could be a teacher, Helpdesk Analyst, or Administrator.
- Mac Developer = A Mac Developer, covers anyone who develops software on the Mac, including macOS iOS, iPadOS, watchOS, and tvOS.
- Mac User = This could be anyone who uses a Mac. You want to learn more about how the Mac works. You could be an everyday user, enterprise user, student, collector, or even an enthusiast.
I have at one time or another been a part of 4 of 5 groups. I started as a Mac User when I got my first Mac (Blue and White PowerMac G3). Then I got my first job in Mac EDU (Mac Higher Education). After that, I moved on to Mac Support (Mac Enterprise IT Support). Today I am a member of Mac Admins (Macintosh Architecture & Engineering).
If you are just getting started and are thinking of getting into a career supporting Apple devices, knowledge and learning is critical. Read and learn as much as you can along the way.
Macos Mojave On Unsupported Macs
Be sure to check out my latest blog posts! If you have any comments or questions, feel free to contact me. Thank you for visiting my website.
Update 2019-05-02: For those of you who want to install macOS 10.14 on an unsupported Mac,check this post.
I have a MacBook Mid 2007 (more technically named MacBook2,1) that officially can not be upgraded beyond Mac OS X 10.7 (Lion). It is however possible to install Mac OS X 10.9 (Mavericks) on it with quite good success and not too much effort.
Catalina For Old Macs
I want to first write what does not work:
- Sleep mode – not working at all – leave on or shut down
- The build-in web camera – “works” but not as it did in 10.7, I think
- YouTube-video (etc), works occationally (now worse than in 10.7, my experience)
I suggest you read the user comments to this post. A few helpful readers have shared their experiences.
What you need:
- A USB Memory, 8GB or larger
- Mac OS X Mavericks (i had the install/upgrade Application that I had myself
downloaded on another Mac, from App Store, when I upgraded it from 10.8 to
10.9. I always keep these for possible future use.) - SFOTT: I used version 1.4.4 which is currently the latest stable
- Audio/Video-drivers from (not here anymore, se comments below).
Warning, this is one of these horrible download pages where you don’t know
where to click to get the right thing, and what gives you spyware. You
should get the file mac-mini-mavericks.7z. Discard anything else without
opening. The 7z-file can be opened with StuffitExpander, that already
comes with Maverick
Making a bootable USB-drive
You first need to use SFOTT to create your bootable USB-drive (it is called “key” in SFOTT). You simply double-click on SFOTT on a Mac where you both have your Mavericks Install App and your USB-drive. SFOTT is a self guiding menu-driven application. It will take some time to make all the settings in SFOTT (it took me perhaps 15 minutes), but it was self-explanatory and not very difficult. Use the autorun mode to create the drive.
Recovery Scenario
When you install a Mac OS upgrade there is a risk your Mavericks system will not boot. When upgrading from 10.9.0 to 10.9.5 like I did, it will not boot. My impression (after reading different sources) is that this recovery is needed when upgrading from 10.9.0 (or 10.9.1 / 10.9.2) but not later. Nobody knows about 10.9.6 of course, because it is not out. Minor upgrades to applications or security upgrades should not cause need to recovery.
When Mavericks fails to start you need to “re-Patch” using SFOTT. I installed Mavericks on a separate partition, side-by-side with Lion, so when Mavericks failed to start my computer automatically started Lion instead and I could run SFOTT in Lion to re-Patch my Mavericks system.
If you can not do side-by-side you can start from your SFOTT-key (which you still have) and instead of installing Maverick you start the Terminal application. Find the SFOTT.app on the key, and find SFOTT.sh inside SFOTT.app. Run SFOTT.sh and you can re-Patch your broken Mavericks system. I did the entire procedure on my working Mavericks just to test it, and it seems fine.
There is if course no true guarantee that a future Apple upgrade will not break everything completely.
Installing Mavericks
Installation of Mavericks from the USB-drive is very standard. To start the computer from the USB-drive, hold down the “alt”-key (not Apple-key, not ctrl-key) while starting the computer. Choose SFOTT and proceed normally. After about an hour you should have a clean 10.9.0 Mavericks with network/wifi working. Video will work, but with problems (try Safari, and you will see), and Audio will not work.
Upgrade Mavericks
I used App Store to upgrade Mavericks to 10.9.5. That works just fine, until Mavericks fails to start (I ended up in my old Lion system on a reboot, if you have no other system installed your computer with probably just not start). This is where you need to recover your system using SFOTT.
Fixing Audio and Video
The 7z-file I referred to above contains Audio and Video drivers. You run the application “Kext Utility” and the you drag the contents of the folder Extensions into the Kext Utility, and it will install the drivers. There is a folder with “optional wifi drivers”, I have not installed those because wifi has been fine all the time for me.
The MacBook2,1 has Intel GMA950 Video, and there are no supported 64-bit-drivers for Mavericks. The drivers I suggest you to install are supposed to be drivers from a public beta of 10.6 (Snow Leopard) that Apple once released. They seem to work quite fine for me though. And not installing them is worse.
I suggest you upgrade to 10.9.5 before fixing Audio and Video. I guess a later Apple-upgrade could break Audio and Video and require you to reinstall drivers.
Problems booting the SFOTT key
I first created the SFOTT key using the SFOTT beta (that is also supposed to work with Yosemite), and I used System Preferences/Startup Disk (in Lion) to start the installion. This failed and my computer just started up in Lion.
I then created the SFOTT key using 1.4.4, AND i restarted the computer holding down the alt-key. This worked. This key also later worked when I used System Preferences/Startup Disk (in Mavericks) to choose startup drive.
Driver Problems
There are open source Audio drivers called VoodooHDA. I installed those ones with success, but audio volume was low. I tried to fix with no success. Later I found the drivers I referred to above and that I recommend.
I found another download for what was supposed to be the same Video Drivers. But the Kext-utility did not work, and I installed the drivers by copying them directly into /System/Library/Extensions and this gave me a broken unbootable system. I don’t know what went wrong, but I recommend the drivers I linked to.
Video/YouTube Performance
Some videos seem to play perfectly, others dont. I had problems with 10.7 too.
Background and about SFOTT
There are several Apple computers that can run 10.7, that have a 64-bit processor, but that can not officially run 10.8 or later. There are a few issues:
- Video Drivers – and in the case of my MacBook2,1 the unofficial ones mentioned
above may be good enough - 32 bit EFI. Even though the computer has a 64 bit processor, the EFI, the
software that runs before the Installer/Operating system, is 32 bit, and not
capable of starting a 64-bit system. - Mavericks does not believe it can run on this hardware.
As I understand it SFOTT installs a little program that 32 bit EFI is capable of starting, and that in turn is capable of staring a 64 bit system. Also, SFOTT patches a few files so Mavericks feels comfortable running on the unsupported hardware.
You can do all of this on your own without SFOTT. SFOTT “just” makes this reasonably easy.
There are plenty of forums, tools and information about running Mac OS X on unsupported hardware (also non-Apple-hardware: a Hackintosh). Those forums of course focus a lot on problems people have.
Yosemite
It is supposed to be possible to install Yosemite in a similar way. SFOTT has a beta release for Yosemite. For my purposes going to Mavericks gave me virtually all advantages of an upgrade (supported version of OS X, able to install latest Xcode, etc).
Conclusion
In the beginning of 2015, it is not that hard to install Mavericks on a MacBook Mid 2007, with a quite good result. I have pointed out the tools and downloads you need and that will work.