How to Grant Full Disk Access for VMware Carbon Black Cloud Endpoint

1. On the desktop menu bar, click the Apple icon and then select System Preferences.

2. In the System Preferences menu, double-click Security & Privacy.

3. On the Privacy tab, select Full Disk Access.

4. If needed, click the padlock icon and provide credentials for a local administrator account (not an Apple ID) to allow changes.

5. Click the + (plus) button to the right of the highlighted Full Disk Access.

6. Under Application, select Confer and then click Open.

7. Click Quit Now.

8. Restart the computer.

Granting an application Full Disk Access is accomplished on MDM software using a Privacy Preferences payload.

The fields to grant Full Disk Access are:

- Identifier: CbDefense
- Identifier type: Bundle ID
- Code requirement: identifier CbDefense and anchor apple generic and
certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and
certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and
certificate leaf[subject.OU] = "7AGZNQ2S2T"
- App or Service: SystemPolicyAllFiles
- Access: Allow