Unable to change security policy

Change security settings on the startup disk of a Mac with Apple silicon

Before a legacy system extension (also known as a kernel extension or kext) can be installed on a Mac computer with Apple silicon, the security policy must be changed to Reduced Security.

1. On the Mac with Apple silicon, choose Apple menu  > Shut Down.
2. Press and hold the power button until “Loading startup options” appears.
3. Click Options, then click Continue.
4. Select a startup disk, then click Next.
5. Select an administrator account, then click Next.
6. Enter the password for the administrator account, then click Continue.
7. In the Recovery app, choose Utilities > Startup Security Utility.
8. Select the system you want to use to set the security policy.
9. If the disk is encrypted with FileVault, click Unlock, enter the password, then click Unlock.
10. Click Security Policy.
11. Select one of the following security options:

• • Full Security: Ensures that only your current OS, or signed operating system software currently trusted by Apple, can run. This mode requires a network connection at software installation time.
  • Reduced Security: Allows any version of signed operating system software ever trusted by Apple to run.

1. If you selected Reduced Security, select any of the following options, if needed:

• • Allow user management of kernel extensions from identified developers: Allows installation of software that uses legacy kernel extensions.
  • Allow remote management of kernel extensions and automatic software updates: Authorizes remote management of legacy kernel extensions and software updates using a mobile device management (MDM) solution.

1. Click OK.
2. If you changed the security, click the User pop-up menu, choose an administrator account, enter the password for the account, then click OK.
3. Choose Apple menu > Restart.
4. You must restart your Mac for the changes to take effect.