# Ziti Desktop Edge for MacOS

**URL:** https://openziti.discourse.group/c/tunnelers/zdem/15.md

[Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md)

---

## [About the Ziti Desktop Edge for MacOS category](https://openziti.discourse.group/t/about-the-ziti-desktop-edge-for-macos-category/192)

<div class="topic-metadata">

**Author:** [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Replies:** 0\
**Last updated:** [September 7, 2021, 3:04pm UTC](https://openziti.discourse.group/t/about-the-ziti-desktop-edge-for-macos-category/192 "2021-09-07T15:04:06Z")

</div>

Post questions here about the Ziti Desktop Edge for MacOS (ZDEM)

---

## [\[2 Features\] - Is it possible to enfore MFA 8 hour expiration and Filtering in the Tunneler?](https://openziti.discourse.group/t/2-features-is-it-possible-to-enfore-mfa-8-hour-expiration-and-filtering-in-the-tunneler/5983)

<div class="topic-metadata">

**Author:** [@MacFee](https://openziti.discourse.group/u/MacFee)\
**Replies:** 1\
**Last updated:** [August 6, 2026, 1:49pm UTC](https://openziti.discourse.group/t/2-features-is-it-possible-to-enfore-mfa-8-hour-expiration-and-filtering-in-the-tunneler/5983 "2026-08-06T13:49:46Z")

</div>

I have been testing the enforcement of MFA for our MacOS Tunneler and it is working; however, I did want to ask 2 general questions. Is it possible to enforce MFA with a TTL so they have to re-enter their MFA token aga…

---

## [Having issues with enforcing MFA on MacOS Tunneler](https://openziti.discourse.group/t/having-issues-with-enforcing-mfa-on-macos-tunneler/5864)

<div class="topic-metadata">

**Author:** [@MacFee](https://openziti.discourse.group/u/MacFee)\
**Replies:** 10\
**Last updated:** [June 23, 2026, 4:01pm UTC](https://openziti.discourse.group/t/having-issues-with-enforcing-mfa-on-macos-tunneler/5864 "2026-06-23T16:01:32Z")

</div>

Hey all, I am very confused on MFAs in the MacOS tunneler. Using Posture Checks with Service Policies In the following setup here, I used Posture Checks on my DIAL services: # Setup posture check of MFA ziti edge creat…

---

## [Trying to get secondary OIDC authentication working in Mac tunneler](https://openziti.discourse.group/t/trying-to-get-secondary-oidc-authentication-working-in-mac-tunneler/5869)

<div class="topic-metadata">

**Author:** [@dimm0](https://openziti.discourse.group/u/dimm0)\
**Replies:** 7\
**Last updated:** [June 5, 2026, 10:33pm UTC](https://openziti.discourse.group/t/trying-to-get-secondary-oidc-authentication-working-in-mac-tunneler/5869 "2026-06-05T22:33:13Z")

</div>

Hi all! I can successfully enroll and connect my MacOS device using the default auth policy. Also can create an ext JWT provider (authentik) and enroll using the JWT token file from "Download network JWT" button and new…

---

## [Compilation error in ziti-tunnel-apple: Missing methods in CZiti despite using the latest library version](https://openziti.discourse.group/t/compilation-error-in-ziti-tunnel-apple-missing-methods-in-cziti-despite-using-the-latest-library-version/5701)

<div class="topic-metadata">

**Author:** [@maika](https://openziti.discourse.group/u/maika)\
**Replies:** 2\
**Last updated:** [March 18, 2026, 8:04am UTC](https://openziti.discourse.group/t/compilation-error-in-ziti-tunnel-apple-missing-methods-in-cziti-despite-using-the-latest-library-version/5701 "2026-03-18T08:04:08Z")

</div>

"I am encountering compilation errors while building the ziti-tunnel-apple project. The compiler reports that several methods from CZiti cannot be found. I am currently using the latest version of the library. Could an…

---

## [Wildcard intercept (\*.example.internal) resolves DNS correctly but never installs utun route on macOS - TCP silently black-holes](https://openziti.discourse.group/t/wildcard-intercept-example-internal-resolves-dns-correctly-but-never-installs-utun-route-on-macos-tcp-silently-black-holes/5691)

<div class="topic-metadata">

**Author:** [@Krishopper](https://openziti.discourse.group/u/Krishopper)\
**Replies:** 1\
**Last updated:** [March 12, 2026, 11:38am UTC](https://openziti.discourse.group/t/wildcard-intercept-example-internal-resolves-dns-correctly-but-never-installs-utun-route-on-macos-tcp-silently-black-holes/5691 "2026-03-12T11:38:06Z")

</div>

When an intercept.v1 config uses a wildcard address (e.g. \*.example.internal), ZDE correctly intercepts DNS queries and allocates a 100.0.0.x address for each resolved hostname. However, the corresponding host route is n…

---

## [OIDC for MacOS Desktop Edge](https://openziti.discourse.group/t/oidc-for-macos-desktop-edge/4446)

<div class="topic-metadata">

**Author:** [@K1ckMan](https://openziti.discourse.group/u/K1ckMan)\
**Replies:** 20\
**Last updated:** [October 9, 2025, 12:20pm UTC](https://openziti.discourse.group/t/oidc-for-macos-desktop-edge/4446 "2025-10-09T12:20:52Z")

</div>

Hi any updates or dates about OIDC for MacOS Desktop edge? Ziti Desktop Edge for MacOS \[coming soon\]

---

## [Enrolment issues on Mac GUI & CLI](https://openziti.discourse.group/t/enrolment-issues-on-mac-gui-cli/4862)

<div class="topic-metadata">

**Author:** [@di-te](https://openziti.discourse.group/u/di-te)\
**Replies:** 2\
**Last updated:** [July 20, 2025, 8:43pm UTC](https://openziti.discourse.group/t/enrolment-issues-on-mac-gui-cli/4862 "2025-07-20T20:43:04Z")

</div>

My goal here is to just document the snags I faced to help identify areas of improvement moving forward. So i am trying to set up ziti through the deployment docs on my ubuntu linux server. i have the controller access…

---

## [Ziti Mobile Edge On IOS Does Not Automatically Reconnect On Reboot](https://openziti.discourse.group/t/ziti-mobile-edge-on-ios-does-not-automatically-reconnect-on-reboot/4173)

<div class="topic-metadata">

**Author:** [@thedarkula](https://openziti.discourse.group/u/thedarkula)\
**Replies:** 4\
**Last updated:** [March 18, 2025, 9:29pm UTC](https://openziti.discourse.group/t/ziti-mobile-edge-on-ios-does-not-automatically-reconnect-on-reboot/4173 "2025-03-18T21:29:41Z")

</div>

Is there a setting to allow ziti to automatically connect on reboot/following system updates?

---

## [Log Location on Ziti Desktop Edge(Mac)](https://openziti.discourse.group/t/log-location-on-ziti-desktop-edge-mac/3439)

<div class="topic-metadata">

**Author:** [@ayushhsinghh](https://openziti.discourse.group/u/ayushhsinghh)\
**Replies:** 3\
**Last updated:** [November 15, 2024, 5:29pm UTC](https://openziti.discourse.group/t/log-location-on-ziti-desktop-edge-mac/3439 "2024-11-15T17:29:06Z")

</div>

Hi Openziti Team, I have been testing the Ziti Desktop Edge for Mac and have a couple of questions: I could not find the location of the logs on Ziti Desktop Edge for Mac. Why are my DNS resolvers not being updated ev…

---

## [Ziti desktop edge + controller/network version compatibility?](https://openziti.discourse.group/t/ziti-desktop-edge-controller-network-version-compatibility/3274)

<div class="topic-metadata">

**Author:** [@woodwardjd](https://openziti.discourse.group/u/woodwardjd)\
**Replies:** 18\
**Last updated:** [October 26, 2024, 10:55am UTC](https://openziti.discourse.group/t/ziti-desktop-edge-controller-network-version-compatibility/3274 "2024-10-26T10:55:39Z")

</div>

Hi! Today I went to use a resource I have on a small self-managed ziti network from my macOS laptop like I have a couple times a week for a couple of years (thanks for helping me set it up, you know who you are!). But,…

---

## [Ziti Desktop Mac Drops Connection After Network Change](https://openziti.discourse.group/t/ziti-desktop-mac-drops-connection-after-network-change/3005)

<div class="topic-metadata">

**Author:** [@ghibsch](https://openziti.discourse.group/u/ghibsch)\
**Replies:** 5\
**Last updated:** [October 3, 2024, 1:21pm UTC](https://openziti.discourse.group/t/ziti-desktop-mac-drops-connection-after-network-change/3005 "2024-10-03T13:21:42Z")

</div>

As we continue to play with OpenZiti I threw it at one of my MacBook users that's mostly remote and primarily just into email. Right away I started getting complaints of disconnects. I was able to reproduce on a test M…

---

## [Integrate RP with tunneler and introspect request](https://openziti.discourse.group/t/integrate-rp-with-tunneler-and-introspect-request/2282)

<div class="topic-metadata">

**Author:** [@rickwang7712](https://openziti.discourse.group/u/rickwang7712)\
**Replies:** 11\
**Last updated:** [July 17, 2024, 1:49pm UTC](https://openziti.discourse.group/t/integrate-rp-with-tunneler-and-introspect-request/2282 "2024-07-17T13:49:56Z")

</div>

Hi, I got a internal website - RP1(http server) which originally required authentication by another internal OIDC SSO. Now I would like to add this RP1 to my new Ziti network by openziti tunneler, and configures extern…

---

## [Mac client Turn ziti on failed](https://openziti.discourse.group/t/mac-client-turn-ziti-on-failed/2020)

<div class="topic-metadata">

**Author:** [@McGonagall666](https://openziti.discourse.group/u/McGonagall666)\
**Replies:** 7\
**Last updated:** [January 31, 2024, 12:37am UTC](https://openziti.discourse.group/t/mac-client-turn-ziti-on-failed/2020 "2024-01-31T00:37:35Z")

</div>

App.log INFO Ziti Desktop Edge:TunnelMgr.swift:193 startTunnel() starting tunnel INFO Ziti Desktop Edge:TunnelMgr.swift:195 startTunnel() start tunnel called with no error ERROR Ziti Desktop Edge:TunnelMgr.swift:203 s…

---

## [macOS Desktop Tunneler 2.35 (495) - Tunneler Disconnects (crashes)](https://openziti.discourse.group/t/macos-desktop-tunneler-2-35-495-tunneler-disconnects-crashes/1895)

<div class="topic-metadata">

**Author:** [@marvkis](https://openziti.discourse.group/u/marvkis)\
**Replies:** 5\
**Last updated:** [December 18, 2023, 10:32pm UTC](https://openziti.discourse.group/t/macos-desktop-tunneler-2-35-495-tunneler-disconnects-crashes/1895 "2023-12-18T22:32:18Z")

</div>

Hi, Today I had 3 unexpected disconnects during my entire Ziti session. This is from the app.log \[2023-12-08T17:20:47:676Z\] INFO Ziti Desktop Edge:Array+ZitiIdentity.swift:25 updateIdentity() my-lovely-id-staging:J…

---

## [macOS Desktop Tunneler 2.34 (493) - Disconnects & Laggy](https://openziti.discourse.group/t/macos-desktop-tunneler-2-34-493-disconnects-laggy/1857)

<div class="topic-metadata">

**Author:** [@marvkis](https://openziti.discourse.group/u/marvkis)\
**Replies:** 15\
**Last updated:** [December 7, 2023, 3:18pm UTC](https://openziti.discourse.group/t/macos-desktop-tunneler-2-34-493-disconnects-laggy/1857 "2023-12-07T15:18:49Z")

</div>

Hi, This morning I received an update to version 2.34 of the macOS Desktop Tunneler and - it seems to introduce some issues: Connections take quite a long time to establish. Often I get no IP from DNS or connection ti…

---

## [Ziti Edge Client MAC loses connection, reconnect fixes problem](https://openziti.discourse.group/t/ziti-edge-client-mac-loses-connection-reconnect-fixes-problem/1376)

<div class="topic-metadata">

**Author:** [@dmuensterer](https://openziti.discourse.group/u/dmuensterer)\
**Replies:** 3\
**Last updated:** [July 8, 2023, 8:11pm UTC](https://openziti.discourse.group/t/ziti-edge-client-mac-loses-connection-reconnect-fixes-problem/1376 "2023-07-08T20:11:20Z")

</div>

Hi, I’ve recently experienced problems every once in a while when trying to access a web application via the MAC Ziti Edge Client. Suddenly, the service behind the overlay doesn’t send a response back anymore. Here ar…

---

## [Auto-reconnect on edge desktop internet disconnect or reboot?](https://openziti.discourse.group/t/auto-reconnect-on-edge-desktop-internet-disconnect-or-reboot/1092)

<div class="topic-metadata">

**Author:** [@johnalotoski](https://openziti.discourse.group/u/johnalotoski)\
**Replies:** 5\
**Last updated:** [February 18, 2023, 1:29am UTC](https://openziti.discourse.group/t/auto-reconnect-on-edge-desktop-internet-disconnect-or-reboot/1092 "2023-02-18T01:29:13Z")

</div>

Hello, does the latest ziti desktop edge client from the App store automatically reconnect on an internet outage or after reboot? If not, is there a recommended way to do this? Also, after enrolling the Desktop Edge cl…

---

## [Zitidesktop Install issue on Mac Intel](https://openziti.discourse.group/t/zitidesktop-install-issue-on-mac-intel/848)

<div class="topic-metadata">

**Author:** [@jcox](https://openziti.discourse.group/u/jcox)\
**Replies:** 1\
**Last updated:** [November 2, 2022, 10:22am UTC](https://openziti.discourse.group/t/zitidesktop-install-issue-on-mac-intel/848 "2022-11-02T10:22:32Z")

</div>

Hello, I have an Apple Intel machine. The Ziti Desktop Edge installed is version 2.21. Several attempts to install version 2.24 have failed. The Apple Store shows version 2.24, but on installing, we only every get th…

---

## [Using kubectl to interact with AKS Manager in Azure over Ziti on macOS](https://openziti.discourse.group/t/using-kubectl-to-interact-with-aks-manager-in-azure-over-ziti-on-macos/650)

<div class="topic-metadata">

**Author:** [@dariuszSki](https://openziti.discourse.group/u/dariuszSki)\
**Replies:** 6\
**Last updated:** [July 11, 2022, 6:12pm UTC](https://openziti.discourse.group/t/using-kubectl-to-interact-with-aks-manager-in-azure-over-ziti-on-macos/650 "2022-07-11T18:12:14Z")

</div>

I am trying to use kubectl to make configuration changes on the AKS cluster I deployed in Azure. The cluster is private and the manager is not reachable from the Internet I can reach the cluster manager over Ziti from my…
