If you’re asked to approve a profile on Mac
A configuration profile is an XML file used to distribute configuration information to Apple devices. Configuration profiles automate the configuration of settings, accounts, restrictions and credentials. There are three types of profiles: user, device and mobile device management (MDM) enrolment.
Profile type | More than one profile of this type allowed? | Requires administrator privileges to install? |
---|---|---|
User | Yes | Varies by profile contents |
Device | Yes | Yes |
Enrolment | No | Yes |
Enrolment profile installed with user consent
An enrolment profile that is sent to you by your IT administrator can be considered fully trusted. You approve the installation and all features of that profile are available.
Enrolment profile installed without user consent
An enrolment profile can also be installed without your consent:
By a malicious app.
By an Installer package.
Remotely via the command line, by someone who knows the administrator username and password (if Remote Login is enabled).
Using screen sharing.
Because this enrolment profile isn’t approved by you, the User Approved Kernel Extension Loading configuration payload won’t have any effect on your Mac. To allow management of User Approved Kernel Extension Loading, contact your trusted IT administrator before you approve the enrolment profile. Approving an unsigned or unknown enrolment profile isn’t recommended.
Important: This additional level of security prevents a malicious enrolment profile from being installed and used to remotely manage your Mac and obtain information you would rather keep private.