Skip to Content

How to fix could not load tap.kext and naclient.pkg script error when installing SSLVPN Client on macOS?

By: Author Alex Lim

Posted on  - Last updated:

Categories Troubleshooting

Problem

Below error show when try to install SSLVPN client on Mac OS High Sierra due to Mac OS is not allowing the KEXT:

/opt/sslvpn-plus/naclient/signed_kext/tap.kext failed to load - (libkern/kext) system policy prevents loading; check the system/kernel logs for errors or try kextutil(8).
Error: Could not load /opt/sslvpn-plus/naclient/signed_kext/tap.kext
installer[4571] : install:didFailWithError:Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “naclient.pkg”." UserInfo={NSFilePath=./postinstall, NSURL=file:///naclient.pkg, PKInstallPackageIdentifier=com.vmware.sslvpn, NSLocalizedDescription=An error occurred while running scripts from the package “naclient.pkg”.}
installer[4571] : Install failed: The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.
installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.)

Solution

  1. Add tun tap team-id to pre-approved kext list.
  2. Uninstall any partially installed sslvpn-plus client.
  3. Boot Mac OS in recovery mode.
  4. On top bar click on utilities > terminal.
  5. Add tuntap kext team id to pre-approved list with the following command: spctl kext-consent add KS8XL6T9FZ
  6. Reboot Mac OS to normal mode.
  7. Verify if Team-ID is seen in kext approved list with following command: spctl kext-consent list
  8. Install SSLVPN Client package.