Overview
After installing Kerio Control VPN Client on Mac, a message appears that the "Kerio Control VPN Client service is not running"
The VPN client Error log generates the following entries:
vpncore: Unable to initialize vpn core: unable to open VPN driver
vpnMain: Unable to open VPN driver: Unknown error
VpnFSM: Failed to initialize VPN driver (99).
Solution
As Apple is constantly implementing new security features to protect macOS users, this issue happens when the Kerio VPN driver is not being correctly recognized as trusted software and the Kerio VPN client is being blocked by the Security Settings. Follow the steps below to resolve the issue:
Important: if you are using MacOS versions 11 and above ("Big Sur" or "Monterey"), you must change the Security Policy to allow third-party kernel extensions before running the steps below. For instructions, please refer to 'How do I enable third party kernel extensions on Apple Silicon-based Macs?'.
Also note when performing the steps for allowing Kernel Extension do NOT choose the option to restart now. This will allow the installer to complete some steps after the choice and is necessary for a successful install.
- Allow Kerio software developers under Preferences -> Security & Privacy -> General tab.
- If you are still experiencing issues, launch terminal and execute the following commands:
cd /Library/LaunchDaemons
sudo launchctl load com.kerio.kvpncsvc.plist
Note: you will be prompted to enter your password.
Important: if you're getting Load failed: 119: Service is disabled error when executing the last command,
load the Kerio VPN service with -w flag, which overrides the Disabled key:sudo launchctl load -w com.kerio.kvpncsvc.plist
- (Optional) Try installing different versions of Kerio VPN client:
Testing
The Kerio Control VPN client connected successfully.