In this article

This article explains how to resolve unexpected end-user prompts that may appear during installation of the DNSFilter macOS Roaming Client version 2.2.0. This guidance applies only to version 2.2.0 and does not apply to previous Roaming Client versions.

When installing the macOS agent version 2.2.0, some users may encounter system prompts requesting admin credentials or approval of system extensions. These prompts typically result from .mobileconfig files being:

• Deployed after the agent package (PKG)

• Not applied successfully via MDM

• Missing entirely

• Conflicting with other profiles already on the device

To prevent or resolve these prompts, follow one of the remediation paths below.

Reinstall with correct deployment order

This method is recommended for consistent results in managed environments.

1. Uninstall the macOS agent and remove the .mobileconfig profiles
2. Redeploy the configuration profiles and agent package in the recommended sequence

When deployed in this order, installation proceeds silently without requiring end-user interaction.

Fix after installation

Use this method if the PKG has already been installed and prompts have appeared.

1. Deploy the required .mobileconfig profiles via MDM:

   • DNSFilter Extension.mobileconfig

   • DNSFilter Proxy.mobileconfig

2. Restart the endpoint

A system reboot is required for profiles to take full effect and suppress remaining prompts.

Additional Information

• If a system prompt (e.g., approval request) is denied during install, the only recovery method is to deploy the .mobileconfig profiles and restart the device

• The macOS agent does not attempt to reinstall components after denial; it enters a holding state awaiting user approval or admin intervention

• Competing profiles—such as other proxy, DNS, or system extension configurations—may interfere with DNSFilter profiles. Review and resolve conflicts within the MDM