Grant Full Disk Access for Cisco Secure Endpoint on macOS Ventura: Mac
If you recently upgraded your Mac’s operating system to macOS 13 (Ventura) you probably noticed that the menu bar icon for Cisco Secure Endpoint is flashing a triangular “warning” icon.
If you click on the Secure Endpoint menu bar icon you will see that there is an "Action Required: Grant Full Disk Access" message.
You will also notice that it is "Running in Degraded Mode!"
If you select “Grant Full Disk Access” from that drop-down menu, you will be taken to the Full Disk Access System Settings of your Mac.
You will also notice that it appears that Secure Endpoint Service and Secure Endpoint System Monitor are already enabled.
Please follow the steps below to remedy this:
Open System Settings from the dock or under the (Apple) menu.
Click on Privacy & Security, and scroll down to click on Full Disk Access.
a) Click once on Secure Endpoint Service and Secure Endpoint System Monitor to select them.
b) Click the minus button (-) at the bottom left corner of the list to remove the items.
Enter your login credentials if prompted, and click the Modify Settings button.
Select Grant Full Disk Access from the Cisco Secure Endpoint menu bar item.
You may see a “helper window” appear that guides you through the process of granting Full Disk Access to the app. You may close or move this window to the side.
You should also have a window already open to the Full Disk Access settings and you will see that macOS has added Secure Endpoint System Monitor back to the list. Enable the setting by clicking the slider.
NOTE: The Secure Endpoint Service setting may not immediately appear, but will appear soon after you have enabled Secure Endpoint System Monitor. Enable the setting.
Once both settings are enabled, you should see a notification banner stating “fault cleared” and the Cisco Secure Endpoint menu bar icon will have stopped flashing the “warning” triangle.
You can verify the status by clicking on the icon.
Notice that there are no longer any actions required and the "Running in Degraded Mode" no longer appears.
If you have any trouble with these steps please contact WCER Research IT (support@wcer.wisc.edu) and we will be happy to assist either in person or via a remote support session.
I expect this bug will be addressed soon by either Apple or Cisco, but we felt it was important that you keep your Mac secure.