Workaround to error 71; not being able to load tap device in OSX High Sierra

65 views
Skip to first unread message

deck...@gmail.com

unread,
Mar 1, 2018, 5:07:58 PM3/1/18
to tunnelblick-discuss
Hi all,

Just wanted to respond to https://tunnelblick.net/cKextLoadErrorHighSierra.html regarding the tap kext not being able to load due to new security measures on High Sierra.

The trick is to add the team-id of Jonathan Bullard to the whitelist of the kext loading mechanism, it's a bit of work since you need to boot into recovery in order to have write access to the NVRAM where the whitelist is stored.

Two steps;
1) Boot into recovery: shutdown mac, start it up again and hold command+R
2) Open the terminal (utilities->terminal) and run the following command: /usr/sbin/spctl kext-consent add Z2SG5H3HC8

The ID is Jonathan Bullard's team ID, please note that every kext signed with that ID will now load without asking for any approval

Now reboot back into the normal OSX operating mode, and the kext will now load and tap works.


Cheers,
F
Reply all
Reply to author
Forward
0 new messages