HP printer drivers under 10.13

[DRoloson]

After installing hp-printer-essentials-S-5_7_5.pkg, I get a dialog

I am able to allow this under System Preferences > Security & Privacy > General but I need
to do this via command line.

Thanks for any help.

[Jeet_singh]

Hi @DRoloson,

Thanks for engaging in HP support Forums! This is a wonderful location to converse with the community, get assistance and find tips! I understand you are having issues with your HP Printer. Don't worry as I have a few suggestions which should help you resolve this issue.

To provide you with an accurate solution, I'll need a few more details:

Could you provide me with the exact model of the printer? Use this link to find it:  https://support.hp.com/in-en/document/c03754824  (Ensure you do not share any of your personal information such as serial, phone number, email ID, etc...).

Have you tried to perform a Hard reset on the printer?

In the meantime, let's try these steps here: 

With the printer turned on, disconnect the power cord from the rear of the printer and also unplug the power cord from the wall outlet.

Remove USB cable, if present.

Wait for 2-3 minutes, press and hold the power button on your printer for about 30 seconds to remove any additional charge.

Now plug back the power cable straight to a wall outlet without any surge protector or an extension cord and then plug back the power cord to the printer.

Turn on the printer and wait till warm-up period finishes and the printer is idle.

Let's try to perform a Reset Printing system on Mac: 

• Click the Apple menu icon, and then click “System Preferences”.
• Click “Printers and Scanner” / “Print and Scan” or “Print and Fax”.
• Right-click the blank space in the Printers list, and then click “Reset printing system”.
• Click “Reset” in the confirmation window.
• Enter an administrator username and password, and then click “OK”.
• Wait until the printing system is reset and no devices show in the Printers list

• Restart your computer and then go back to System preferences – Printers and scanners.
• Click the “Add button” (+).
• Find, and then select the name of your printer from the printer list, and then click “Add” to add your printer.
• Click “Print Using...” or “Use”, and then select Secure AirPrint or AirPrint. Alternatively, you may select the name of your printer if available in that list.

Could you please respond to this post with the details of the product and with the results of the troubleshooting for further assistance.

Eagerly waiting for your response!

I hope you have a good day ahead,

And Feel free to ask your queries as this forum has some of the best people in the world available and ready to help.

Regards,

[DRoloson]

I didn't give a printer model since that is irrelevant.

The driver package installs a system extension

and Apple blocks third party system extensions under 10.13.

[Jeet_singh]

Hi @DRoloson,

Thank you for replying,

As I understand you are having issues with the printer, Just wanted to check if you have followed the steps suggested in the previous post. If you haven't tried the steps, request you to try these steps and get back to us with the results for further assistance. 

If you have followed the steps suggested and still having the issue. This could also be an issue with the Apple PC, you could try to contact their tech support for further assistance. 

If nothing works, I would suggest you contact our HP phone support so that they can remotely take control of your PC and help you check the settings. 

HP Technical Support can be reached by clicking on the following link: http://h22207.www2.hp.com/us-en/?openCLC=true

(1) Once the support page opens please select the country in which you're located. Next, enter your HP model number on the right.

(2) Next, choose the 'Contact Support' tab at the top and scroll down to the bottom of the 'HP Support- Contact' page to fill out the form provided with your contact information.

(3) Once completed click the 'Show Options' icon on the bottom right.

(4) Lastly, scroll down to the bottom of the page and select 'Get the phone number.' A case number and phone number will now populate for you.

If you have any troubles, let me know and I will do my best to help!

Hope this helps, for any further queries reply to the post and feel free to join us again

Feel free to post your query for any other assistance as well,

It's been a pleasure interacting with you and I hope you have a good day ahead.

If you wish to show appreciation for my efforts, mark my post as Accepted Solution.

And click on the Purple Thumbs up icon at the bottom of my comment.

Regards,

[IronBadger · Accepted solution]

@DRoloson

Apple has a Tech Note on this.

Unfortunately, they way it currently works, you would still have to touch each remote machine and turn off this level of security to allow the remote install.

https://developer.apple.com/library/content/technotes/tn2459/_index.html

For enterprise deployments where it is necessary to distribute software that includes kernel extensions without requiring user approval, there are two options:

• If your workflow is based on imaging, boot into Recovery OS and use the spctl kext-consent command. For detailed information about the spctl command, run the command spctl help. This command can either disable the user approval requirement completely or specify a list of Team IDs whose KEXTs may be loaded without user approval. The spctl command works in any installation environment, including Recovery OS and from NetBoot/NetInstall/NetRestore images.

  Note that the Team ID list maintained by spctl is separate from the system-wide policy database.

The extension being installed is hp_io_printerclassdriver_enabler.kext which is required for some printers.

[donmontalvo]

What would help macOS administrators greatly is if HP can clean up their KEXT information, so our inventory tools don't show unusable/garbled TeamID,BundleID information for KEXTs coming from HP:

GT8P3H7SPW,com.McAfee.AVKext
GT8P3H7SPW,com.McAfee.FMPSysCore
GT8P3H7SPW,com.McAfee.SFKext
,com.hp.hpio.hp_psa530_630_io_enabler
,com.hp.hpio.hp_psa640_io_enabler
,com.hp.kext.hp-fax-io
,com.hp.print.hpio.Designjet.kext
,com.hp.print.hpio.Deskjet.kext
,com.hp.print.hpio.Inkjet.kext
,com.hp.print.hpio.Inkjet1.kext
,com.hp.print.hpio.Inkjet2.kext
,com.hp.print.hpio.Inkjet3.kext
,com.hp.print.hpio.Inkjet4.kext
,com.hp.print.hpio.Inkjet5.kext
,com.hp.print.hpio.Inkjet9.kext
,com.hp.print.hpio.Laserjet.kext
,com.hp.print.hpio.Officejet.kext
,com.hp.print.hpio.Photosmart.kext
,com.hp.print.hpio.PhotosmartPro.kext
,com.hp.print.hpio.inkjet7.kext
,com.hp.print.hpio.inkjet8.kext
4C6364ACXT,com.parallels.kext.hypervisor
4C6364ACXT,com.parallels.kext.netbridge
4C6364ACXT,com.parallels.kext.usbconnect
4C6364ACXT,com.parallels.kext.vnic

So...HP...please provide your TeamID (a 10 character string) so we don't have to go fishing to fill gaps left behind by sloppy coding.

Thanks,

Don

[IronBadger]

I have passed along your comment to the development team.

[donmontalvo]

Circling back to post something I shoud have posted the first time.

The reason I posted about HP's sloppy coding is because to create a KEXT whitelist, we need TeamID (a 10 character string) if we are whitelisting by company, or TeamID,BundleID (if we are whitelisting on a per-KEXT basis).

The faster you guys fix your code, the faster we can whitelist your KEXTs.

The recommendation to loosen up security to compensate for sloppy coding is both risky and reckless.

Just saying...

Don