---
title: "Enable Self Protection on a standalone Mac"
slug: "enable-self-protection-on-a-standalone-mac"
tags: ["ENS 10.7.x", "Install and Get Started"]
updated: 2026-10-06T18:13:02Z
published: 2026-10-06T18:13:02Z
canonical: "docs.trellix.com/enable-self-protection-on-a-standalone-mac"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enable Self Protection on a standalone Mac

Once installed, Trellix Endpoint Security (ENS) for Mac starts protecting the system immediately with default configurations. For standalone installations, Self Protection is enabled by default to secure the product's own files and processes.

> [!WARNING]
> Important
> 
> Self Protection requires specific macOS permissions to function correctly. Ensure that all Trellix processes have **Full Disk Access** by referring to [KB91109](https://thrive.trellix.com/s/article/KB91109) before enabling this feature.
> 
> In environments not managed by Mobile Device Management (MDM), you must restart the FMPD service after granting Full Disk Access to the Self Protection CLI binary for the settings to take effect. To restart the service, execute the following command in the Terminal:
> 
> ```
> sudo /usr/local/McAfee/fmp/bin/fmp restart
> ```

 

For standalone installations, you can manually verify or enable protection through the local product interface.

1. Click the Trellix icon on the status bar and select **Preferences**.
2. Click the **Common** icon in the top navigation bar.
3. Click the **Lock** icon at the bottom and enter your administrator password to allow changes.
4. Select **Enable Self Protection**.
5. Select the resources to protect:

  - **Files and folders**: Prevents unauthorized modification or deletion of security files.
  - **Processes**: Prevents unauthorized stopping or killing of Trellix processes.
6. Specify the **Action** for each resource:

  - **Block only**: Prevent changes to protected software files without generating an event.
  - **Report only**: Allow changes to protected software files and generates an event in the Trellix ePO server.
  - **Block and report**: Prevent changes to protected software files and generates an event in the Trellix ePO server.
7. (Optional) Under **Exclude these processes**, click + to add trusted third-party process names that require access to Trellix files.
8. Click the **Lock** icon again to prevent further changes.

You can [test the Self Protection feature](/v1/docs/test-the-self-protection-feature) to verify it is functionaing properly.