-
Titre
Enable use of replication shares on MacOS Catalina (10.15) or later -
Description
Starting with MacOS 10.15 (Catalina) and later, including MacOS 11.0 Big Sur, full disk access for processes is prevented by default. As such, using MacOS 10.15 or later as a replication share host will require granting full disk access to the appropriate agent processes.
-
Résolution
A user will need to manually grant Konea and KSchedulerConsole full disk access in System->Security and Privacy preferences. We are unable to set these automatically due to security restrictions, and the only way to avoid doing this manually is if the Mac is managed by Apple MDM and they configure through PrivacyPreferencesPolicyControl. Without either configuring manually or via MDM, the Mac will get permission not permitted error when trying to replicate to the share.
See this Apple support article for more information if you have MDM managed Macs:
https://support.apple.com/guide/mdm/privacy-preferences-policy-control-payload-mdm38df53c2a/web
Walkthrough
1. Open System Preferences->Security and Privacy, and select the Privacy tab and Full Disk Access in left pane. Click the lock to unlock the settings.
2. Click +, browse to /Library/Application Support/Quest/KACE/bin and select konea and KSchedulerConsole. Click Open.
3. Verify that konea and KSchedulerConsole are checked in the list.
