Datto’s Mac Agent Update Still Needs Local Permission Approval

On a muted green background, a silver laptop has a blank dark screen and a pale connection cord looping behind it. Beside the computer, a lavender certificate card supports a closed brass padlock; its key lies separately on the desk. A small blue MacDigest binocular symbol is centered below.

Conceptual illustration for Datto RMM on Mac: a connected notebook, a blank certificate and a closed permission lock with a separate local key. Illustration: MacDigest.

Datto RMM 15.1.4 brings an automatic certificate update to online Macs, but administrators should plan for someone at affected machines before restoring remote access. The agent-only release introduces build 12497, addressing older installations that missed the updated Kaseya signing certificate. Its deployment is staged by platform.

Arrange local approval

Macs moving from the previous certificate need their permissions approved again before Web Remote works. This includes older-certificate installations of 11994 and Zinfandel’s 12202 from before October 4, 2026. Installations already using the updated certificate retain their permissions.

The recovery guide says an administrator must be at the Mac. Required permissions cover Local Network, Screen & System Audio Recording, Accessibility and Full Disk Access. Full Disk Access needs manual approval in System Settings; it has no pop-up.

For distributed teams, arrange that local help before scheduling a remote support session.

Separate online and offline recovery

Online agents can take several hours to update after their platform receives the release. If an online Mac cannot connect through Web Remote, Datto warns against restarting it or trying Agent Browser as a fallback.

Offline Macs need a fresh installer run over the existing agent, without uninstalling first. Allow five to eight minutes for components to update before starting Web Remote and handling permissions.

Permissions can also appear enabled while still referring to the old certificate. For a blank screen, missing controls or persistent failures, use the guide’s relevant recovery section. A version number alone is insufficient verification: check connectivity and an actual remote session.

Check the platform schedule

As of October 15, Kaseya’s status page marks EU1’s October 14 maintenance completed at 19:30 UTC. That confirms the maintenance window ended, not that every Mac updated.

The published schedule places US West and EU2 on October 19, Concord and APAC on October 20, and Vidal on October 21. Timing may change.

Kaseya’s October 14 incident update says the new numbered build follows that schedule. Its earlier October 4 report of a fix across all supported platforms should not be read as confirmation that 12497 is globally deployed.

MacDigest has not independently tested the update.

Leave a Reply

Your email address will not be published. Required fields are marked *