No Pop up Notifications to Complete Privacy and Security Permissions on macOS

Hi Houndstooth,

By any chance are you able to install the endpoint successfully on the system? I'm suspecting that the reason as to why "required action" is not showing was due to mac kext permission issue.
Can you applying this below steps. and let us know for the status.

Boot into macOS Recovery mode.
Open Terminal.
Run the command: /usr/sbin/spctl kext-consent add 2H5GFH3774
Reboot the affected Mac

Hi Houndstooth,

By any chance are you able to install the endpoint successfully on the system? I'm suspecting that the reason as to why "required action" is not showing was due to mac kext permission issue.
Can you applying this below steps. and let us know for the status.

Boot into macOS Recovery mode.
Open Terminal.
Run the command: /usr/sbin/spctl kext-consent add 2H5GFH3774
Reboot the affected Mac

Hi GlennSen,

Thank you so much for reaching out. I followed your instructions and ran that command from terminal in recovery mode. When I rebooted, I was still not prompted by the pop up notification that would allow me to finish authorization the OS permissions for Sophos. I did not notice any changes to the permissions settings under System Preferences>Privacy&Security.

I would happy to troubleshoot further if you have any other suggestions.

Thanks again!

Hi Houndstooth

Even after providing the Kext permission if you are still seeing the issue, could you please confirm if the privacy setting has been configured successfully? Please check this link to confirm if the security permissions have been configured. 

Hi Shweta,

Here is the output I receive in terminal when entering the command you provided. This is on a test device that has had the Kext permission entered via terminal in recovery mode. Please let me know if there is any other information I can provide.

Thanks so much!

Hi Houndstooth, 

Thank you for sharing the screenshot. It would be great if you can share a screenshot of the Sophos files present in System Preferences > Security and Privacy > Privacy > Full Disk Access along with the output of the following command - kextstat | grep -v com.apple 

Hi Yashraj,

Thanks for looking into this. I believe these are are the screenshots you are looking for.

Hi Houndstooth,

Thank you for the screenshots! From the terminal output, it seems that Sophos Kexts are loaded into the system. However, Sophos does not have the full disk access permission as it does not have a checkmark next to it (as seen from the 1st screenshot). 

I'd recommend you to check the "Sophos Scan" option and check any other Sophos entry present there. For reference, in my device, the following options are checked: Sophos Diagnostic Utility, SophosScanAgent, Sophos Endpoint UIServer, SophosCleanD, and, SophosServiceManager. (see the image below for reference.)

Hi Yashraj,

Thank you so much for your continued attention to this issue! The issue I am experiencing is that I do not see all of the Sophos options that you see and that are checked off in System Preferences>Security&Privacy on your device.

After I install Sophos on my test device, I do not see any options or maybe only one option after a few minutes.

I would like for all of the Sophos options to appear after I install Sophos so I can check them off and then hand the device off to the end user without worrying about whether or not Sophos is working properly or whether the end user will check off the options when they get the prompt to do so.

I hope that makes sense. Please let me know if I can explain anything better. Is what I am asking for possible?

I'm having a similar problem where all of the checkboxes are checked, and I've done both the drag and drop from the notification prompt and the individual app drag and drop from the Library folder. Nothing works the pop up continues (often too) to jump up. 

Hi Houndstooth, 

Please try adding the components manually, like shown in this video starting from 1:18: https://www.youtube.com/watch?v=5wOgAiy1kps&feature=emb_logo. Hope this is helpful.

Thank you, Yashraj. I was able to add the components manually from the Library folder. I will make use of this workflow in the future,  eve though I was hoping to pull all the components over at once using the Icon prompt. Since we cannot force the prompt, I will pull each component over separately.

Thanks again,

Kevin