• Kaspersky Endpoint Security 11.2.0 for Mac (version 11.2.0.185)
• Kaspersky Endpoint Security 11.1.0 for Mac (version 11.1.0.210)

• On devices with ARM architecture (M1) — downloadKES_11.2_ARM_profile.zip, extract and apply the configuration profile KES_11.2_ARM_profile.mobileconfig.
• On devices with 64-bit systems —download KES_11_profile.zip, extract and apply the configuration profile KES_11_profile.mobileconfig using the JAMF remote administration tool. This profile must also be used before the remote installation of Kaspersky Endpoint Security 11.1.0 for Mac.

This will give the application:

• Permission to install System Extensions and Network Extensions (Network Content Filtering) that are necessary for the successful installation of the application
• Full Disk Access for the correct operation of File Threat Protection

The configuration profile does not give permission to install the root certificate that is required to intercept HTTPS traffic. This permission can only be obtained locally on the device.

The configuration profile has settings that can be performed only via User Approved Mobile Device Management (UAMDM). When you apply the configuration profile locally on the device, the following error occurs: “Profile installation failed. The profile must be a system profile. User profiles are not supported.” To avoid the error, use the remote management tool.

How to create configuration profile for Kaspersky Endpoint Security for Mac by yourself

• https://support.kaspersky.com/15647#block2

What to do if you experience any issues

• https://support.kaspersky.com/15647#block3

Knowledge Base :

• KB#15647