Installation
Using LTO on a Mac requires a range of drivers to be installed properly. Getting your drivers sorted out can be a bit of a hassle, especially on Big Sur and later macOS versions.
Canister's Preflight Checks functionality tries to help you as much as possible by detecting any missing, outdated, inconsistent, or incomplete drivers when LTO hardware is detected.

Preflight Checks
Upon each app start, Canister will do a complete systems check - looking for Thunderbolt devices, Host Bus Adapters, and SCSI devices. On the software side, Canister checks for all required frameworks and drivers.
Canister will also offer to download Apple's Command Line Tools ("CLT") and a separate installer for the Catalog functionality.
In a nutshell:
🟢 Everything green - you're good to go, and Canister will automatically continue.
🟠 Orange indicates a part of your setup is not 100% up to date, but it's fine to continue as is.
🔴 Red means your setup won't do. Preflight Checks will tell you how to resolve it, if possible.
For reference, here's a list of all drivers that we host. If you're a Canister user, you don't need these - Canister will serve you the ones you need based on your system.
That said, sometimes it helps to have direct links. We regularly update this list of drivers, so there's no need to worry about checking if they're the latest version.
HBAs
macFUSE
LTFS
ICU
Catalogs
https://hedge.video/external/canister/hba/areca
https://hedge.video/external/canister/hba/arecaM1
https://hedge.video/external/canister/hba/atto-6 (6xx series, PCI-3)
https://hedge.video/external/canister/hba/atto-12 (12xx series, PCI-3)
https://hedge.video/external/canister/hba/atto-GT (12xx series, PCI-4)
Each Thunderbolt-based LTO drive consists of three devices:
- 1.The Thunderbolt-to-PCI board
- 2.A Host Bus Adapter (or "HBA"), a device translating PCI to SCSI
- 3.The LTO drive itself
Non-Thunderbolt LTO drives, connected via SAS or Fibre Channel, will connect to a HBA that lives in an external box or as a PCI card inside your computer.
The only part of your hardware that requires a driver is the HBA.
Since Big Sur's release, Apple no longer ships drivers for HBAs. HBA drivers are macOS kernel extensions. Starting with Big Sur, kernel extensions require additional steps to install. On top of that, Apple silicon devices require you to change security settings to allow those extensions to run. Configuring these settings is expected behavior with Apple silicon, but cumbersome nonetheless.
We've tried to smooth out the process as much as possible, but be prepared for a bunch of successive reboots and raised eyebrows 🤷♂️
HBAs come in different flavors, and (to make life easy) not all work with LTFS.
- Most brands, including recent mLogic units, use ATTO. Three possible ATTO drivers make matters easy: 6G, 12G PCI-3, and 12G PCI-4 ("GT").
- Most MagStor units use Areca, but sometimes they use ATTO.
- Old mTape units also house Areca cards. These tend to be incompatible with LTFS.
- Some brands might use SANPoint or HighPoint "RocketStor" HBAs.
- LSI HBAs do not work on a Mac. These cards are also sold under HP's brand name.

Canister detects an mLogic device, but no HBA is found.
If Canister detects a MagStor LTO Thunderbolt device, it will ask you to input its serial and serve you the correct driver for the HBA inside. Not all units are made equal, so don't rely on memory. Through our partnership with MagStor, we have an up-to-date list of products, serials, and HBAs.
Locate your serial on the back or bottom of your unit.
If you have a mLogic Thunderbolt device, Canister will ask you for its serial and provide the correct driver for the HBA.
Locate your serial on the back or bottom of your unit - it should be five characters. If it's six, keep reading:
mLogic made a bit of a mess of their serials by not tracking which HBA was used with which unit. This wasn't a problem until Apple decided to stop shipping drivers with each macOS version. Depending on your unit, it either requires an ATTO or Areca driver. You can try to install both drivers, and see which one works:
Note: there's no need to uninstall unused kexts afterwards.

Locate your mLogic serial.
Symply exclusively uses ATTO HBAs, but the model varies with the unit. Best to reach out to Symply first - they will know and can get you up and running.
Open World Computing's Mercury LTO devices have used various HBAs, including LSI units that do not work on a Mac. Reach out to OWC to learn which driver you'll need.
If you're using a different brand than one of the above, Canister makes an educated guess if no HBA is detected (thus, there's no driver installed). If you don't know which driver your LTO hardware needs, get in touch with your vendor - they will know and can get you up and running.
Installing HBA drivers can be a tedious ordeal, thanks to Apple. If you run into trouble, grab a coffee, carve out some time, and we'll walk you through the process with this documentation.
If your Mac is managed through MDM, stop now and contact your System Administrator.
The following steps below will not apply when using MDM.
On Apple silicon, you'll first need to set your Mac's security policy to "Reduced Security" to be able to load signed kernel extensions. If you're on Intel, you can skip to Installing the HBA driver.
Apple's use of "Reduced Security" language is misleading. With it, your Mac's security is on par with the level of security you've come to expect with previous versions of macOS.
1. In System Preferences, go to the
Security & Privacy
preference pane and click General
.2. Next, click
Enable system extensions...
, then click Shutdown
when prompted.
Enable system extensions

Shutdown to boot into the Security Utility
3. Shut down your Mac.
4. Press and hold down the power button until your Apple silicon Mac boots. Your Mac will either send you directly into macOS' Recovery environment, or you'll see an
Options
button leading to that.5. Log in with your user account and select the disk you want to use.
6. In the menu bar, go to
Utilities
, then select Startup Security Utility
.
7. Click
Security Policy...

Select the disk and click Security policy
8. Select
Reduced Security
, then enable:
Allow user management of kernel extensions from identified developers
.
9. Click
OK
.10. In the menu bar, select
Shut Down
.11. Turn the Mac back on (press but don't hold the power button this time) and log in.
Now, install the driver for your HBA that Canister provides. During installation, you'll see a Security & Privacy popup alert.

Either select
Open Security Preferences
or go to System Preferences > Security & Privacy > General
. Click the lock bottom left-hand and enter your password. 
Click the
Allow
button, and reboot as suggested. If there's a different button in the same place, click it and enable all the kernel extensions listed - then reboot.After rebooting, macOS might prompt you to
Open Security Preferences
and do the whole thing again (and sometimes, a third time.)Next, launch Canister. If Canister detects the driver isn't loaded, it will tell you to
Allow driver in system settings
to trigger macOS to show the much-coveted Allow
button.When successful, Canister will show you this:

If not, keep reading. We suggest finding a cozy spot and a big bag of patience.
We've found multiple workarounds and listed them in order of success rate. If one doesn't work for you, be sure to try the other suggestions.
Try installing macFUSE first, then reinstall the HBA driver. Even though the
install FUSE
link is greyed out in Canister, you can still click it. Installing macFUSE first seems to get macOS out of its not-showing-the-Allow
-button funk.Since most people use ATTO HBAs, we'll use those as an example. But you can use these steps with any kext.
First, look up your driver's name in
/Library/Extensions
:- For ATTO 6G, use
ATTOExpressSASHBA2.kext
- For ATTO 12G (PCI-3), use
ATTOExpressSASHBA4.kext
- For ATTO 12GT (PCI-4), use
ATTOExpressSASHBA5.kext
Then, try loading the kernel extension manually in Terminal:
macOS 11 and newer
macOS 10.15.7 and older
sudo /usr/bin/kmutil load -p /Library/Extensions/ATTOExpressSASHBA2.kext
sudo kextload /Library/Extensions/ATTOExpressSASHBA2.kext
You'll need to enter your password. Then, open the
Security & Privacy
pane again – it should show you the Allow
button.If you finished the installation, and your LTO drive works but stops working after each reboot, forcing you to load the kernel extension over and over again, there's likely a remnant of an older ATTO driver of your system. Here's how to remedy that:
Suppose you finished the installation, and your LTO drive works. However, after each reboot, it stops working, forcing you to load the kernel extension over (and over) again. There's likely a remnant of an older ATTO driver in your system. Here's how to remedy that:
- 1.In Finder, hit
Shift-Command-G
, then go to/Library/Extensions
. - 2.Delete any
ATTOSASHBA*.kext
in that folder (password required, most of the time). - 3.In Terminal, copy/paste this:
sudo kextcache --clear-staging
(password required). - 4.Reboot if macOS doesn't already force you to.
- 5.Reinstall the ATTO driver your LTO machine requires.
If any of the Terminal commands above return errors like
system policy prevents loading
, your computer is very likely under IT management policies that prevent kernel extensions from loading. Talk to your IT department first; they'll know what to do.Do you keep running into non-loading kernel extensions? Then there's something wrong with your macOS install, likely due to upgrading your OS instead of doing a fresh install. At this point, it's just faster to reinstall macOS. Less daunting than it sounds and won't take long, thanks to APFS:
Now that you have installed your HBA drivers, the biggest hurdle is behind you. Let's move on:
To make LTFS work, you'll first need to install macFUSE. LTFS uses it to represent the data onto the tape as a volume on your computer. It's also a kernel extension, so yes, more reboots.

Do not click OK, but click Open Security Preferences.
Use this command in Terminal (all on one line):
macOS 11 and newer
macOS 10.15.7 and older
sudo /usr/bin/kmutil load -p /Library/Filesystems/macfuse.fs/Contents/Extensions/11/macfuse.kext
kextload /Library/Filesystems/macfuse.fs/Contents/Extensions/11/macfuse.kext
Again, you'll need to enter your password, then open the Security & Privacy pane – it should show you the
Allow
button.When Canister detects an HBA and LTO drive, it will deduce which LTFS you need. LTFS has a dependency called ICU to support international characters, so Canister will tell you to install ICU first. Then, you install LTFS. No reboots are needed; it's pretty straightforward.

Preflight Checks prompting to install LTFS
Finally, you'll need some additional drivers for Canister's Catalogs functionality.
To install the drivers needed for Catalogs, Preflight Check will prompt you to install Apple's Command Line Tools ("CLT") first:

Preflight Checks prompting to install Command Line Tools
If CLT doesn't download (it happens, as Apple hosts it themselves), you can do so manually with this Terminal command:
xcode-select install
Then, continue with the Catalogs installer itself.

Finish Catalog installation
Sometimes, macOS won't properly finish the Catalogs installer, stating the installation failed. If so, CLT most likely wasn't installed properly or completely. Reinstalling CLT will fix that:
1. Delete the folder
/Library/Developer/CommandLineTools
. (If this folder isn't present, CLT wasn't installed anyway.)2. Reinstall Command Line Tools by using the following Terminal command:
xcode-select --install
3. When done, run this command to make sure the installation is correct (all on one line):
1
PATH="/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec"; export PATH; m4 --version
4. It will output some text, which should look like this:
GNU M4 1.4.6 Copyright (C) 2006 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.Written by Rene' Seindal.
5. Then, rerun the Catalog installer.
1. Immediately after installation, go to Finder and hit
Shift-Command-G
. 2. Go to
/tmp
.
If your LTO drive previously worked, but your Mac no longer can see an LTO drive, neither can Canister.
There are typically two situations you can end up in:

Your Mac doesn't detect any LTO SCSI device. Canister will keep scanning until it finds one.
Possible causes include:
- You have an mLogic device, but your Thunderbolt cable probably isn't connected properly.
- You're using an LTO drive with a separate HBA, but the HBA likely isn't detected. Check if it's listed under
System Information > SAS
. If not, install its driver.

Your Mac somehow lost the connection to the LTO drive. Your best bet is to power cycle all gear, including the Mac.
Once the power cycle completes, check if all devices are listed in the
System Information.app
. You should see at least two entries on the SAS
page:- A Host Bus Adapter, like ATTO or Areca
- A Ultrium LTO SCSI, device made by IBM, HP (or HPE), Quantum, or Tandberg
Can't get up and running? Running in circles? It can happen and is typically an indicator of a deeper macOS problem. The company that sold you your LTO drive and/or Host Bus Adapter should be your first line of contact, as this is about your hardware - not Canister. That said, we're happy to help if that's a dead end.
Don't hesitate to contact us, and be sure to include a screenshot of Canister's Preflight Checks, so we know what the situation is before jumping on a remote session.
We won't give up on you
👍
Last modified 1mo ago