[Evin Hexnode 10 February 2022 Evin Moderator]

Hi @zeb,

Thanks for reaching out.

First, you have to check whether System Integrity Protection (SIP) is enabled on the device by running the command below.

Check SIP status

csrutil status

1	csrutil status

If SIP is enabled on the device, you will not be able to run the command for resetting or uninstalling system extensions. Here is what you need to do to disable SIP.

• Restart the device into recovery mode.
• Launch Terminal from Utilities menu and run the command given below.
Disable SIP

csrutil disable

1	csrutil disable

• Then, reboot the computer.

After disabling SIP, you can delete all system extensions on the device by running the following command.

Reset system extensions

systemextensionsctl reset

1	systemextensionsctl reset

If you don’t want to remove all the system extensions, you can execute the code below to remove a specific system extension from the device.

Uninstall system extension

systemextensionsctl uninstall TEAMID BUNDLEID

1	systemextensionsctl uninstall TEAMID BUNDLEID

Also, you can use the following command to find the system extensions present on the device and related details, such as team ID and bundle ID.

Details of system extension

systemextensionsctl list

1	systemextensionsctl list

Please turn on SIP after removing the system extensions from the device. To enable SIP, restart your computer in recovery mode, open the Terminal from Utilities menu, and execute the following command.

Enable SIP

csrutil enable

1	csrutil enable

Finally, reboot the device and check the status to ensure it is enabled.

The ‘systemextensionsctl’ command only works on devices running macOS Catalina and above. Please note that the commands are taken from third-party Open-Source sites. Hence, Hexnode will not be responsible for any damage/loss to the system due to the command’s behavior.

Hope this answers your query.

Cheers!
Evin Lee
Hexnode UEM