Remember, different programs may use SH files for different purposes, so you may need to try out a few of them to be able to open your specific file. These apps are known to open certain types of SH files. Kexts approved in previous macOS versions by MDM (or other distribution systems like JAMF) are no longer approved once they've upgraded to 10.13.4. Summary Our products (as well as other kernel-based products) are running into a situation in which kernel extensions (kexts) are no longer approved.