Using the Mac Enforcer Tool
The Mac Enforcer Tool enforces the Warp client, which is used to keep your Mac connected to your Content Policy.
The Tech Lockdown dashboard included a setup wizard that will walk you through the process of installing the Mac Enforcer Tool.
Once installed, the Enforcer Tool will detect whether the Cloudflare Warp application is running, then restart the application if it's disabled:
This means that you won't have to block access to Activity Monitor, since the program will be re-enabled if force quit.
More importantly, it also means that you will need to uninstall the Enforcer Tool in order to uninstall the Cloudflare WARP client.
Installing the Enforcer Tool
The Mac Enforcer Tool can be found on the dashboard by going to Tools > Mac. After you download the installer, double-click it to start the installation process.
Follow the instructions on the install wizard for the tool.
As you run the installer, you will be asked for your Mac's password in order to complete the installation.
Additionally, enable the permission for the installer to modify Apps on your Mac. This is needed in order to enforce the filtered VPN application.
Uninstalling the Mac Enforcer Tool
To Mac Enforcer Uninstaller can be found on the Tech Lockdown dashboard by going to Tools > Mac. Make sure to choose the Uninstall tab on this page.
Follow the Instructions on the uninstall wizard for the tool.
Limiting Access to the Uninstaller
If you're self-managing, the Tech Lockdown dashboard now offers the ability to lock access to the uninstaller tool.
To do this, make sure to Lock your Profile .
You will need to unlock your profile later in order to access the uninstaller tool.
Frequently Asked Questions
What does the Enforcer Tool do on my Mac?
When you first run the installer, it runs a few commands that limit the ability to uninstall the Cloudflare WARP application. It then runs a program that checks whether Cloudflare is disabled, and restarts the application if it's not running.
The restrictions set by the installer are deleted when your run the uninstaller.
Why do I need to unlock my profile in order to access the uninstaller?
If you're self-managing, then you need to make sure that your restrictions can't be easily disabled. Locking the Enforcer Tool with your profile means that it will require significantly more effort and time to remove your restrictions later.
Learn more about how locking your profile works.
Where is the file downloaded onto my Mac?
When you download the installer, the default location you'll find it is on your Mac's Downloads folder. You should use Finder to access it.
What do I do if I find a method to bypass the enforcer tool?
We've tried our best to ensure that the Enforcer Tool is as difficult to bypass as possible. If you suspect that you've found a way to disable it, please reach out to Tech Lockdown support .
We'll look into the issue and see if we can fix it in an update.
I've tried double-clicking the installer but it doesn't seem to work.
In some cases, Mac's GateKeeper feature might not recognize some versions of the installer or uninstaller. You'll need to run the installer using System Settings instead.
First, go to the location where you originally downloaded the file (usually your Downloads folder).
Go ahead and double-click the .pkg file as if you're trying to run the installer. You should see a notification window that asks whether you'd like to delete the file. Click Done, and keep the file.
Afterwards, open your Mac's System Settings application. Search for "Privacy and Security".
Scroll down to the Security section. Since you've attempted to run a program not recognized by GateKeeper, you should see it listed here. Click Open Anyway.
You'll see another pop-up window. Click Open Anyway again.
You should now be able to follow the instructions in the installer to finish the setup process.