Skip to content

Latest commit

 

History

History
58 lines (40 loc) · 3.08 KB

Disable_Gatekeeper.md

File metadata and controls

58 lines (40 loc) · 3.08 KB

How to disable Gatekeeper in macOS Sequoia

macOS

Disabling Gatekeeper in macOS ≥ 15.1.1

From macOS 15.1.1 onward, Apple reverted the necessity of having a configuration profile to disable Gatekeeper, so the old Terminal command works again:

spctl --master-disable
Globally disabling the assessment system needs to be confirmed in System Settings.
  • Next, navigate to "System Settings" >> "Privacy & Security"
  • Scroll down to "Security" and select "Anywhere" from the dropdown menu.
  • Read the note about reduced security when disabling Geatekeeper, press "Allow Anywhere" and go on with your life:
    allowanywhere

Disabling Gatekeeper in macOS Sequoia < 15.1.1

After installing macOS Sequoia beta 3 on a new APFS volume, I wanted to run Corpnewt's MountEFI script to mount the ESP but it was blocked by Gatekeeper. Right-clicking the file and selecting "Open" did no longer work either. So I decided to disable GateKeeper via Terminal as usual, only to realize that this is no longer possible either:

sudo spctl --master-disable
Password:
This operation is no longer supported. To disable the assessment subsystem, please use configuration profiles.

So, config profiles it is…

Disabling Gatekeeper with the Sentinel app

The Sentinal app will install a signed config profile to disable Gatekepper.

  • Download the latest version of Sentinel
  • Unzip and run the app
  • Click on the green lock icon
  • Enter your admin password
  • Click "Okay" in the "Attention" pop-up:
    att
  • This will open the System Settings >> Privacy & Security
  • Scroll down to "Security" and select "Anywhere" from the dropdown menu:
    disableGK
  • Enter your admin pw once again
  • Read the note about reduced security when disabling Geatekeeper, press "Allow Anywhere" and go on with your life:
    allowanywhere

Previous Method

This will also install a config profile to disable Gatekepper but it will be unsigned.

  • Download Disable.Gatekeeper.mobileconfig.zip and unzip it
  • Go to System Settings >> General >> Device Management and click the + button
  • Navigate to the Disable.Gatekeeper.mobileconfig file and open it
  • A new device called "Disable Gatekeeper" should appear:
    disablegk

Afterwards, Gatekeeper will be disabled.

Credits

  • dhinakg for the mobileconfig file
  • miliuco for the explanations