This article has been archived and is no longer updated by Apple.

Prepare your institution for macOS High Sierra 10.13.4

If you're a system administrator, you should review this list and prepare for changes before updating to macOS High Sierra 10.13.4.

User Approved Kernel Extension Loading

User Approved Kernel Extension Loading is no longer disabled on devices enrolled in MDM. If you use enrollment initiated by DEP (Device Enrollment Program), or User Approved MDM enrollment, you can apply the Kernel Extension Policy to manage User Approved Kernel Extension Loading. Learn more about changes to kernel extensions in macOS High Sierra.

All MDM enrollments completed prior to upgrading to macOS 10.13.4 are automatically converted to User Approved Enrollments. MDM enrollments completed on macOS 10.13.4 and later can be converted to User Approved Enrollments. Open Profiles preferences, then select the enrollment profile. Click Approve on the right, then follow the prompts. These steps aren't required for enrollments that were initiated by DEP.

macOS Installer

The startosinstall command inside the macOS Installer app in Contents/Resources/startosinstall lets you erase an APFS volume and install macOS to it using the new --eraseinstall flag. All volumes on the APFS container will be erased as part of this installation process. You can specify additional packages to apply after installing macOS with the --installpackage flag. To build these packages, use the productbuild(1) command. Learn more about upgrading and installing macOS.

Published Date: