Network extension not loading on MacOS Sonoma 14.7.8

Hi! When starting my app which is loading a Content Filter Network Extension I am getting the following error :

sysextd: <bundle_id> : extension failed category property check: extensions belonging to the com.apple.system_extension.endpoint_security category require a later version of operating system to launch

...

OSSystemExtensionRequest didFailWithError for <bundle_id> : The operation couldn’t be completed. (OSSystemExtensionErrorDomain error 9.)

This is happening on a VM running Sonoma 14.7.8. I upgraded the VM to the latest available OS and the system extension is loading just fine.

My question is : reading the documentation, I understand that the Network Extensions are supported starting with macOS 10.10+. Why is this not working on my Sonoma 14.7.8 VM?

Answered by DTS Engineer in 857779022
I believe the deployment target is correct since the same app is working just fine on Sequoia 15.6

Huh? If you’re deployment target were, say, macOS 15.0, then the app would work fine on 15.6 but fail like this on 14.7.8.

Anyway, I recommend that you check the deployment target of both your app and all the embedded sysexen. For example:

% plutil -p QNE2PacketSysEx.app/Contents/Info.plist 
{
  …
  "LSMinimumSystemVersion" => "10.15.4"
  …
}
% plutil -p QNE2PacketSysEx.app/Contents/Library/SystemExtensions/com.example.apple-samplecode.QNE2PacketSysEx.SysEx.systemextension/Contents/Info.plist 
{
  …
  "LSMinimumSystemVersion" => "10.15.4"
  …
}

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

You’re correct that system extension packaging for NE providers should work on macOS 14.

As to why this is failing, it’s hard to tell. However, I have a question about this:

… extensions belonging to the com.apple.system_extension.endpoint_security category …

Note that this is trying to use the Endpoint Security category (com.apple.system_extension.endpoint_security). Does your sysex contain an ES client as well? Or do you have more than one sysex?

Also, are you sure you’ve set the deployment target on your sysex correctly?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

That's a good catch. I am using both and ES and an NE. For both of them I am getting the same error.

I believe the deployment target is correct since the same app is working just fine on Sequoia 15.6

I believe the deployment target is correct since the same app is working just fine on Sequoia 15.6

Huh? If you’re deployment target were, say, macOS 15.0, then the app would work fine on 15.6 but fail like this on 14.7.8.

Anyway, I recommend that you check the deployment target of both your app and all the embedded sysexen. For example:

% plutil -p QNE2PacketSysEx.app/Contents/Info.plist 
{
  …
  "LSMinimumSystemVersion" => "10.15.4"
  …
}
% plutil -p QNE2PacketSysEx.app/Contents/Library/SystemExtensions/com.example.apple-samplecode.QNE2PacketSysEx.SysEx.systemextension/Contents/Info.plist 
{
  …
  "LSMinimumSystemVersion" => "10.15.4"
  …
}

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Network extension not loading on MacOS Sonoma 14.7.8
 
 
Q