How to check if mdm profile for system extension is installed on macOS?

Is there a way to check if a mdm profile with an approved system extension is installed on MacOS?

Approved kext can be found in the file /var/db/SystemPolicyConfiguration/KextPolicy.

Is there something similar for System Extensions?

Up vote post of AlexanderPrice Down vote post of AlexanderPrice
4.1k views
Posted by
AlexanderPrice
Reply
Add a Comment

Replies

Approved kext can be found in the file 

/var/db/SystemPolicyConfiguration/KextPolicy
.

To be clear, the location and format of that file is not considered API and you should not be relying on it in production code.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware 

let myEmail = "eskimo" + "1" + "@apple.com"
Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment

It was this file that I indicated in my question.

I need to find approved system extensions, not kext.

Posted by
AlexanderPrice
Up vote reply of AlexanderPrice Down vote reply of AlexanderPrice
Add a Comment
You can verify the extension status using systemextensionsctl list and the MDM config profiles using sudo profiles -Lv. The bundle ID and team ID has to match in order for the system extension to be approved.
Posted by
Security Engineer
Up vote reply of Security Engineer Down vote reply of Security Engineer
Add a Comment