Activating Local Encryption in SecureSafe with Apple Silicon

The SecureSafe DesktopApp runs a virtual file system, which is used as soon as encryption is activated. For this, SecureSafe uses macFUSE, a system extension developed by a third party named Benjamin Fleischer.

What is macFUSE?

macFUSE is a software package that brings support for FUSE file systems to macOS. FUSE file systems are regular applications that run in user space as opposed to kernel extensions. There are many third party products that rely on macFUSE to provide file system integration.

macFUSE enables developing file systems for many use cases, including but not limited to:

• File system integrating of cloud storage services
• Transparent encryption and decryption of files
• Accessing volumes whose format is not supported by macOS
• App-specific virtual volumes

How to Install macFUSE

Download the latest version of macFUSE here, then double click the downloaded file and run the installer.

During the installation/update process you will be prompted to allow loading the macFUSE kernel extension. macFUSE enables developers to create file systems without having to write a single line of kernel code. The macFUSE kernel extension bridges the gap between user space file systems and the macOS kernel.

Enabling Support for Third Party Kernel Extensions (Apple Silicon Macs)

Enabling support for third party kernel extensions is only needed when using macFUSE for the first time on an Apple Silicon Mac. In case you already enabled support for third party kernel extensions, continue with "Allow the macFUSE kernel extension to load".

macOS 13 and Later

1. On Apple Silicon Macs the following prompt will be displayed when trying to load a kernel extension for the first time. Click on the "Open System Settings" button. This will open the Privacy & Security settings.
   
2. By default, third-party kernel extensions are disabled on Apple Silicon Macs. Click on the "Enable System Extensions…" button and enter your login password when prompted. 
   

3. Click on "Shut Down". After your Mac has shut down, press and hold the Touch ID or power button of your Mac to start the Recovery environment and launch Startup Security Utility.

   

4. Select the macOS volume you want to update the security policies for. Usually there is only one volume. Then click on the "Security Policy…" button.
   
   

5. Select "Reduced Security" and enable "Allow user management of kernel extensions from identified developers". Then click on "OK", enter your login password when prompted and restart your Mac.
   
   

macOS12 and Earlier

1. On Apple Silicon Macs the following prompt will be displayed when trying to load a kernel extension for the first time. Click on the "Open Security Preferences" button. This will open the Security & Privacy systems preferences.
   

2. By default, third-party kernel extensions are disabled on Apple Silicon Macs. Click on the lock in the lower left corner of the window and enter your login password. Then click on the "Enable system extensions…" button.
   

3. Click on "Shut Down". After your Mac has shut down, press and hold the Touch ID or power button of your Mac to start the Recovery environment and launch Startup Security Utility.
   

4. Select the macOS volume you want to update the security policies for. Usually there is only one volume. Then click on the "Security Policy…" button.
   
   

5. Select "Reduced Security" and enable "Allow user management of kernel extensions from identified developers". Then click on "OK", enter your login password when prompted and restart your Mac.
   
   

Allowing the macFUSE Kernel Extension to Load (Apple Silicon and Intel Macs)

macOS13 and Later

1. On Apple Silicon and Intel Macs the following prompt will be displayed when trying to use macFUSE for the first time or after after installing a macFUSE update. Click on "Open System Settings".
   

2. A notification will be displayed, informing you that system software from developer "Benjamin Fleischer" was blocked from loading. Click on the "Allow" button. You will be asked for your login password.
   

3. After restarting your Mac you can use macFUSE.

macOS12 and Earlier

1. On Apple Silicon and Intel Macs the following prompt will be displayed when trying to use macFUSE for the first time or after after installing a macFUSE update. Click on "Open Security Preferences".
   
   

2. Click on the lock in the lower left corner of the window and enter your login password. Then click on the "Allow" button.
   

3.  After restarting your Mac you can use macFUSE. 
   
   

Troubleshooting Guide

• In case there is no "Allow" button after following the above steps, trying to load the macFUSE kernel extension manually might help. Run the following command in Terminal:
  

  /usr/bin/sudo /usr/bin/kmutil load -p
  /Library/Filesystems/macfuse.fs/Contents/Extensions/14/macfuse.kext

  Replace the "14" in the above command with the major version number of the current macOS release you are running. You will need to enter your login password, when prompted, for this to work. Please note, your user account needs administrative permissions.
• In case you are prompted to allow loading the macFUSE kernel extension again and again even though you clicked the "Allow" button and restarted your Mac when prompted to, you are running into a macOS bug. Starting with version 4.7.1, macFUSE contains a workaround for this issue.
  The macFUSE file system bundle contains several kernel extensions to support a wide range of macOS releases. In rare cases macOS picks the wrong extension. As a workaround you can strip the unused extensions from the macFUSE file system bundle by running the following command in Terminal.
  

  /bin/bash <(curl -Ls https://gist.github.com/bfleischer/46dde8226a47f218b4d4eb8a51c50136/raw)

  
  Please note, your user account needs administrative permissions and you will be prompted to enter your login password. Then try mounting the volume again and follow the instructions above.
• Recent versions of macOS do not support loading third-party kernel extensions when booting from external volumes. There is no known workaround. This is a limitation of macOS, not macFUSE.
• If you need to check which version of macFUSE you currently have installed on your device, run the following command in Terminal:
  

  pkgutil --pkg-info io.macfuse.installer.components.core