Switch to kext-less mode

You can switch from kext mode to kext-less mode on your standalone Mac using these commands.

Before you begin

You must have administrator rights on the system you intend to change the kext mode.


  1. Open a Terminal window, run the following commands in the given order.
  2. Stop the FMP in Kext mode:
    /usr/local/McAfee/fmp/bin/fmp stop
  3. Disable Threat Prevention in Kext mode:
    /usr/local/McAfee/AntiMalware/VSControl stopoas
  4. Change Threat Prevention kext mode:
    sudo /usr/local/McAfee/AntiMalware/VSControl switch-mode KextLess
  5. Disable self-protection in the FMP:
    /usr/local/McAfee/fmp/bin/fmp switch-mode KextLess
  6. Start the FMP in KextLess mode:
    sudo /usr/local/McAfee/fmp/bin/fmp start
  7. Enable Threat Prevention in KextLess mode:
    sudo /usr/local/McAfee/AntiMalware/VSControl startoas
    When you switch to the KextLess mode or if the product is running in the KextLess mode, these kernel extensions are not loaded on the Mac.
    • com.McAfee.Filecore
    • com.McAfee.AVKext
    • com.McAfee.FMPSysCore

    But, the kernel extension for Firewall is loaded on the Mac for Firewall to function.

  8. If you installed Adaptive Threat Protection, then run these commands:
    1. Stop Adaptive Threat Protection: sudo /usr/local/McAfee/atp/bin/ATPControl stop
    2. Change Adaptive Threat Protection kernel mode: sudo /usr/local/McAfee/atp/bin/ATPControl switchmode KextLess
    3. Start Adaptive Threat Protection: sudo /usr/local/McAfee/atp/bin/ATPControl start