MacOS Mojave - load unsigned kernel extension

Question

in macOS mojave one can't simply load unsgined kexts:

$ sudo kextutil -l /Applications/myapp.app/Contents/Resources/Driver.kext
Untrusted kexts are not allowed

What should I do to be allowed (besides a dev cert..)?

Will these do?:

sudo nvram boot-args=kext-dev-mode=1
csrutil enable --without kext

• manually allowing via the GUI?

Answer 1

There are two avenues to get the extension whitelisted:

1. Manage the mac using MDM and follow the steps to have your MDM pre-clear this specific extension.
2. Open the Security System Preferences and click to white list this extension once you have attempted to load it one time.

https://developer.apple.com/library/archive/technotes/tn2459/_index.html

The above article has the two buttons you need to click in the GUI to white list each extension on each machine.