McAfee Enterprise compatibility with Privacy Policy Preference Control

Technical Articles ID: KB91109
Last Modified: 9/7/2021

Environment

McAfee Endpoint Security for Mac (ENSM) 10.x
McAfee Data Loss Prevention (DLP) Endpoint for Mac 11.x
McAfee File and Removable Media Protection (FRP) for Mac 5.4.x and later

Apple macOS Mojave 10.14.x and later

Summary

To improve security on Mac systems, macOS Mojave 10.14 introduces a new feature, Privacy Policy Preference Control (PPPC). This feature requires user consent to allow any installed third-party applications to have access to protected system locations such as Mail, Calendar, and Photos. In macOS Catalina 10.15, Apple expanded this protection to encompass removable storage devices, network shares, and user folders. For example: Desktop, Documents, and Downloads.

Problem

Because of PPPC, McAfee Enterprise software isn’t allowed to access protected system locations without user consent. The operating system might prompt users to allow consent for McAfee Enterprise product processes.

Example:

In ENSM, fmpd or VShieldScanner
In DLP Endpoint for Mac, datalossd or datalosste

NOTE: For proper operation, DLP Endpoint must have access to mounted network shares, removable storage devices, and user-specific folders.

Solution

Apple enables you to manage PPPC settings through a user-approved Mobile Device Management (MDM) profile.

With the settings in the following table, create a PPPC settings payload to manage McAfee Enterprise product processes. See the specific MDM vendor instructions for payload creation details. Or, you can download and import the profile configuration file. The file is included in the correlating product .zip file in the Attachment section of this article. The profile configuration file can only be deployed through an MDM solution and can't be used on unmanaged devices.

Product	Process Path	PPPC Profile Key	Identifier Type to be used in the Payload
ENSM
Required for all ENSM versions	/usr/local/McAfee/fmp/bin64/fmpd	SystemPolicyAllFiles	Path
Required for all ENSM versions	/usr/local/McAfee/AntiMalware/VShieldScanner	SystemPolicyAllFiles	Path
Also required only for ENSM 10.6.5 to 10.6.7	/usr/local/McAfee/AntiMalware/VShieldService	SystemPolicyAllFiles	Path
Also required only for ENSM 10.6.5 to 10.6.7	/usr/local/McAfee/AntiMalware/VShieldTaskManager	SystemPolicyAllFiles	Path
Also required only for ENSM 10.7.0 to 10.7.1	/usr/local/McAfee/AntiMalware/VShieldScanManager	SystemPolicyAllFiles	Path
Also required only for ENSM 10.7.5 and later	ID: com.mcafee.tp.endpointsecurity	SystemPolicyAllFiles	Bundle ID
DLP Endpoint for Mac
	ID: com.mcafee.console	SystemPolicyAllFiles	Bundle ID
	/usr/local/McAfee/fmp/bin64/fmpd	SystemPolicyAllFiles	Path
FRP for Mac
	/usr/local/McAfee/fmp/bin64/fmpd	SystemPolicyAllFiles	Path

Related Information

Attachment

PPPC_McAfee_v3.0.mobileconfig.zip
1K • < 1 minute @ broadband

Affected Products

Configuration
Data Loss Prevention Endpoint 11.6.x
Data Loss Prevention Endpoint 11.5.x (EOL)
Data Loss Prevention Endpoint 11.4.x (EOL)
Endpoint Security for Mac Threat Prevention 10.x
File and Removable Media Protection 5.4.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Knowledge Center

McAfee Enterprise compatibility with Privacy Policy Preference Control

Environment

Summary

Problem

Solution

Related Information

Attachment

Affected Products

Languages:

Title

Title

Knowledge Center

McAfee Enterprise compatibility with Privacy Policy Preference Control

Environment

Summary

Problem

Solution

Related Information

Attachment

Affected Products

Languages:

Choose your region

Title

Title