Knowledgebase: Deep Freeze Mac
Deep Freeze MAC and High Sierra Support for APFS Volumes
Posted by Adam Zilliax, Last modified by Richard Z on 29 September 2017 01:22 PM
Deep Freeze Mac and High Sierra Support
With the release of macOS High Sierra 10.13 it is expected that many systems running this operating system will see a transition from HFS+ to APFS as the default file system. At this time Faronics Deep Freeze does not support installation on an APFS formatted volume.
Accordingly, Faronics recommends that customers uninstall Deep Freeze if they're planning to convert the HFS+ volume to APFS (this happens automatically on SSD drives). If you have already upgraded then you will not see your ThawSpaces and we can help you retrieve those.
Upgrading to High Sierra on an HFS+ formatted volume while Deep Freeze is still installed has no issues as long as it is not an SSD drive.
While support for APFS volumes is being worked on at this time there is no ETA for a release to formally support the installation of Deep Freeze on these systems. Please contact Support to be added to our notification list. We will also update this post and notify via the Support portal.
More information on APFS can be found at the link below;
User Approved Kernel Extension Loading:
With the release of macOS High Sierra 10.13 third-party kernel extensions installed with or after the installation of macOS High Sierra require user consent in order to load. This is known as User Approved Kernel Extension Loading. This will impact Faronics Deep Freeze since Deep Freeze requires that its kernel extension is loaded in order to function properly.
The kernel extension from Faronics Corporation will need to be approved locally on each computer at the time that Deep Freeze is installed. The kernel extension approval only needs to happen once, after that subsequent restarts or even reinstalls of Deep Freeze will not require further approvals.
Here are 2 solutions to resolve this issue:
Solution A: Use Mobile Device Managment
Another way to disable User Approved Kernel Extension Loading is to enroll the computer in Mobile Device Management (MDM). On macOS High Sierra this will automatically disable User Approved Kernel Extension Loading.
If you don't have an MDM solution, sign up for Deep Freeze MDM at: https://deepfreeze.
Note, an upcoming update to Deep Freeze MDM will support macOS configuration. For now, you can enroll it as an iOS device, however, you won't be able to perform any actions on that Mac once it shows up in your MDM devices list.
Solution B: Disable Locally
User Approved Kernel Extension Loading can be disabled for enterprise deployments where it is necessary to distribute software that includes kernel extensions, like Faronics Deep Freeze, without requiring user approval.
To disable User Approved Kernel Extension Loading, boot into macOS Recovery and use the 'spctl kext-consent disable' command to completely disable the feature or use 'spctl kext-consent add HSHQ55YT7B' to just disable it for all Faronics signed kernel extensions.
More information on User Approved Kernel Extension Loading can be found at the link below;