You probably found this article because your device\u2019s installer app tells you that you have to use macOS Recovery mode to enable kernel extensions<\/strong>. We wrote this article to explain how, and if you are curious, why.<\/p>\n\n\n\n There\u2019s a class of hardware devices that process a lot of data (for example, Thunderbolt audio interfaces) that require low-level access to a computer. They need to connect to the central processor chip and hardware without first going through the layers of code in the operating system. They need to access the kernel<\/strong>, which is the core computer code that is positioned between the OS and the hardware.<\/p>\n\n\n\n Connecting hardware or drivers to the kernel is something that\u2019s been around for years. It was implemented different ways on earlier version of computers with Intel processors, running Windows, macOS, or otherwise.<\/p>\n\n\n\n On macOS, a device that needs access to the kernel does so by installing a piece of software called a kernel extension<\/strong>, or kext<\/strong>.<\/p>\n\n\n\n For security reasons, however, the operating system is set up to prevent access to the kernel. You can install your device\u2019s kernel extension, but the device cannot connect until you grant permission to override the system\u2019s security settings to create an exception for that one kernel extension.<\/p>\n\n\n\n On older, Intel-based Mac computers<\/strong>, a user with administrator privileges could grant the security exception within macOS in one step by changing a setting in System Preferences.<\/p>\n\n\n\n On the new Mac with Apple silicon computers<\/strong> (with M1, M2, M3, or M4 series chips), however, Apple adds an additional step. After you run the software installer, you must:<\/p>\n\n\n\n Then you can start using your device or software.<\/p>\n\n\n\n There are two things to bear in mind:<\/p>\n\n\n\n This procedure only applies to Mac with Apple silicon computers<\/strong>.<\/p>\n\n\n\n If you are not sure if you have a Mac with Apple silicon, here\u2019s how to find out.<\/p>\n\n\n\n TIP: When you boot your Mac into Recovery mode, you are not running macOS. You can\u2019t see the Finder, the desktop, or any of your files. Before you go into Recovery mode, print out these instructions or view them on another device.<\/p>\n\n\n\n The Mac will boot into Recovery mode, where you will see several different apps you can run.<\/p>\n\n\n\n In the menu bar, choose Utilities > Startup Security Utility<\/strong>.<\/p>\n\n\n\n In the Startup Security Utility<\/strong> dialog box, select your internal hard drive, usually labeled \u201cMacintosh HD.\u201d This is the drive that you boot from when you run macOS. Click Security Policy<\/strong>.<\/p>\n\n\n\n Enabling management of kernel extensions in macOS Recovery<\/em><\/p>\n\n\n\n In the next Startup Security Utility<\/strong> dialog box:<\/p>\n\n\n\n Your Mac will now boot into macOS as usual.<\/p>\n\n\n\n Continue to follow the installation instructions that came with the device or software that requires the kernel extension. The instructions will explain how to go to System Settings<\/strong> (System Preferences<\/strong> in older versions of macOS) and enable the permissions necessary to use your device or software.<\/p>\n\n\n\n To learn more about the various functions of macOS Recovery, here\u2019s our SweetCare guide macOS Recovery Explained<\/a>.<\/p>\n\n\n\nBackground: What Is Enabling Kernel Extensions, and Why Is It Necessary?<\/h2>\n\n\n\n
How to Enable Kernel Extensions in macOS Recovery Mode<\/h2>\n\n\n\n
Do You Have a Mac with Apple Silicon?<\/h3>\n\n\n\n
Follow This Procedure<\/h3>\n\n\n\n
Start the Mac in Recovery Mode<\/h3>\n\n\n\n
Startup Security Utility<\/h3>\n\n\n\n
![\"macOS](\"https:\/\/www.sweetwater.com\/sweetcare\/media\/2024\/01\/macos-recover-reduced-security.png\")
<\/a><\/figure><\/div>\n\n\n\n