[Bug] ZeroTier fails to launch on macOS 26.1 after installation

[CarlosGGGGGG]

Environment

• Device: MacBook
• OS: macOS 26.1
• ZeroTier version: Installed from https://download.zerotier.com/dist/ZeroTier%20One.pkg

Steps to Reproduce

1. Download and install ZeroTier from the official link above.
2. After installation, try launching the app by:
   • Double-clicking the ZeroTier icon, or
   • Searching for “ZeroTier” in Spotlight and pressing Enter.
3. Observe the result.

Expected Behavior

ZeroTier should open normally or show some indication (UI window, icon in menu bar, or system prompt).

Actual Behavior

Nothing happens after attempting to launch:

• No window or process appears.
• No error message or system prompt is shown.

Additional Context

Other network-related software currently installed on the system:

• Clash Verge Rev
• Cisco Secure Connect

Please let me know if there are any specific logs or diagnostic steps I can provide to help troubleshoot.

[Bibi74]

Same issue here. Tried restarting MAC but same issue

[dmkjr]

same issue.

[doubleheiker]

Same issue.

[dmkjr]

ZT is pretty useless at the moment. This is going to push people to jump to TS if this doesn't get resolved soon. (I just noticed I just paid $50 again this month).

[joseph-henry]

I've tried replicating this and it works on my machine running 26.1.

Can anyone give additional details about your system or network-related software that might be installed that could be a clue?

Another thing that could be helpful is opening up Console and starting a log stream and then performing the above steps and stopping the stream. Then search zerotier and let me know if you see any errors.

[Bibi74]

Here is what console is tracking (not clear for me)

par défaut 09:08:34.000768+0100 kernel tcp_connection_summary (tcp_drop:1449)[:61584<->:49152] interface: en0 (skipped: 0)
so_gencnt: 8614553 t_state: SYN_SENT process: zerotier-one:578 Duration: 75.001 sec Conn_Time: 0.000 sec bytes in/out: 0/0 pkts in/out: 0/0 pkt rxmit: 0 ooo pkts: 0 dup bytes in: 0 ACKs delayed: 0 delayed ACKs sent: 0
rtt: 0.000 ms rttvar: 250.000 ms base rtt: 0 ms so_error: 60 svc/tc: 0 flow: 0x8fc8d1ef
par défaut 09:08:34.000778+0100 kernel tcp_connection_summary [:61584<->:49152] interface: en0 (skipped: 0)
so_gencnt: 8614553 t_state: SYN_SENT process: zerotier-one:578 flowctl: 0us (0x) SYN in/out: 0/11 FIN in/out: 0/0 RST in/out: 0/0 AccECN (client/server): Disabled/Disabled
par défaut 09:08:34.002976+0100 kernel SK[3]: flow_entry_alloc fe "0 proc kernel_task(0)zerotier-one nx_port 1 flow_uuid CC11F3F4-1242-417B-B70C-00BF44FB4FE3 flags 0x14120<CONNECTED,QOS_MARKING,EXT_PORT,EXT_FLOWID> ipver=4,src=.61684,dst=.49152,proto=0x06 mask=0x0000003f,hash=0x3674ed5c tp_proto=0x06"
par défaut 09:08:34.003072+0100 kernel tcp connect outgoing: [:61684<->:49152] interface: en0 (skipped: 0)
so_gencnt: 8617145 t_state: SYN_SENT process: zerotier-one:578 SYN in/out: 0/1 bytes in/out: 0/0 pkts in/out: 0/0 rtt: 0.0 ms rttvar: 250.0 ms base_rtt: 0 ms error: 0 so_error: 0 svc/tc: 0 flow: 0xa3417603
par défaut 09:08:41.214298+0100 WindowServer 427b3[SetFrontProcess]: [DeferringManager] Updating policy {
advicePolicy: .frontmost;
frontmostProcess: 0x0-0x125125 (ZeroTier) mainConnectionID: 12317B;
} for reason: updated frontmost process
par défaut 09:08:41.214344+0100 WindowServer 427b3[SetFrontProcess]: [DeferringManager] Deferring events from frontmost process PSN 0x0-0x125125 (ZeroTier) -> <pid: 2684>
par défaut 09:08:41.214410+0100 WindowServer new deferring rules for pid:414: [
[414-1108]; <keyboardFocus; ZeroTier:0x0-0x125125>; () -> <pid: 2684>; reason: frontmost PSN --> outbound target,
[414-1107]; <keyboardFocus; >; () -> <token: ZeroTier:0x0-0x125125; pid: 414>; reason: frontmost PSN,
[414-1106]; ; () -> <token: ; pid: 414>; reason: Deferring to
]
par défaut 09:08:41.214462+0100 WindowServer [keyboardFocus 0x9c894a080] setRules:forPID(414): [
[414-1108]; <keyboardFocus; ZeroTier:0x0-0x125125>; () -> <pid: 2684>; reason: frontmost PSN --> outbound target,
[414-1107]; <keyboardFocus; >; () -> <token: ZeroTier:0x0-0x125125; pid: 414>; reason: frontmost PSN,
[414-1106]; ; () -> <token: ; pid: 414>; reason: Deferring to
]
par défaut 09:08:41.214469+0100 runningboardd Acquiring assertion targeting [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] from originator [osservice<com.apple.coreservices.launchservicesd>:383] with description <RBSAssertionDescriptor| "frontmost:2684" ID:418-383-2588061 target:2684 attributes:[
<RBSDomainAttribute| domain:"com.apple.launchservicesd" name:"RoleUserInteractiveFocal" sourceEnvironment:"(null)">
]>
par défaut 09:08:41.214581+0100 runningboardd Assertion 418-383-2588061 (target:[app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684]) will be created as active
par défaut 09:08:41.216744+0100 WindowServer chain did update (setDeferringRules) <keyboardFocus; display: null> containsEndOfChain: YES; [
<token: ; pid: 414>,
<token: ZeroTier:0x0-0x125125; pid: 414>,
<pid: 2684>
]
par défaut 09:08:41.217336+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring jetsam update because this process is not memory-managed
par défaut 09:08:41.217477+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring suspend because this process is not lifecycle managed
par défaut 09:08:41.217533+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Set darwin role to: UserInteractiveFocal
par défaut 09:08:41.217569+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring GPU update because this process is not GPU managed
par défaut 09:08:41.217665+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring memory limit update because this process is not memory-managed
par défaut 09:08:41.218918+0100 runningboardd Acquiring assertion targeting [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] from originator [osservice<com.apple.coreservices.launchservicesd>:383] with description <RBSAssertionDescriptor| "notification:2684" ID:418-383-2588062 target:2684 attributes:[
<RBSDomainAttribute| domain:"com.apple.launchservicesd" name:"LSNotification" sourceEnvironment:"(null)">
]>
par défaut 09:08:41.218988+0100 runningboardd Assertion 418-383-2588062 (target:[app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684]) will be created as active
par défaut 09:08:41.239842+0100 runningboardd Calculated state for app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>: running-active (role: UserInteractiveFocal) (endowments: )
par défaut 09:08:41.241072+0100 ControlCenter Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:08:41.240889+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring jetsam update because this process is not memory-managed
par défaut 09:08:41.240900+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring suspend because this process is not lifecycle managed
par défaut 09:08:41.240911+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring GPU update because this process is not GPU managed
par défaut 09:08:41.240962+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring memory limit update because this process is not memory-managed
par défaut 09:08:41.272643+0100 runningboardd Calculated state for app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>: running-active (role: UserInteractiveFocal) (endowments: )
par défaut 09:08:41.273437+0100 ControlCenter Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:08:41.274929+0100 gamepolicyd Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:08:41.276410+0100 gamepolicyd Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:08:46.586158+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring jetsam update because this process is not memory-managed
par défaut 09:08:46.586172+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring suspend because this process is not lifecycle managed
par défaut 09:08:46.586182+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring GPU update because this process is not GPU managed
par défaut 09:08:46.586210+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring memory limit update because this process is not memory-managed
par défaut 09:08:46.593581+0100 runningboardd Calculated state for app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>: running-active (role: UserInteractiveFocal) (endowments: )
par défaut 09:08:46.594105+0100 ControlCenter Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:08:46.594424+0100 gamepolicyd Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:08:52.912072+0100 WindowServer 76403[StealKeyFocusReturningID]: [DeferringManager] Updating policy {
advicePolicy: .keyThief;
frontmostProcess: 0x0-0x125125 (ZeroTier) mainConnectionID: 12317B;
keyThiefConnectionID: 76403;
} for reason: key thief updated 76403 0x0-0x29029 (Spotlight)
par défaut 09:08:52.912162+0100 WindowServer 76403[StealKeyFocusReturningID]: [DeferringManager] Deferring events from frontmost process PSN 0x0-0x125125 (ZeroTier) -> <pid: 2684>
par défaut 09:08:52.912297+0100 WindowServer new deferring rules for pid:414: [
[414-110C]; <keyboardFocus; >; () -> <pid: 798>; reason: outbound to keyThief,
[414-110B]; <keyboardFocus; ZeroTier:0x0-0x125125>; () -> <pid: 2684>; reason: frontmost PSN --> outbound target,
[414-110A]; <keyboardFocus; >; () -> <token: ZeroTier:0x0-0x125125; pid: 414>; reason: frontmost PSN,
[414-1109]; ; () -> <token: ; pid: 414>; reason: Deferring to
]
par défaut 09:08:52.912344+0100 WindowServer [keyboardFocus 0x9c894a080] setRules:forPID(414): [
[414-110C]; <keyboardFocus; >; () -> <pid: 798>; reason: outbound to keyThief,
[414-110B]; <keyboardFocus; ZeroTier:0x0-0x125125>; () -> <pid: 2684>; reason: frontmost PSN --> outbound target,
[414-110A]; <keyboardFocus; >; () -> <token: ZeroTier:0x0-0x125125; pid: 414>; reason: frontmost PSN,
[414-1109]; ; () -> <token: ; pid: 414>; reason: Deferring to
]
par défaut 09:08:52.941359+0100 intelligencecontextd starting RequestID(1353:157 = 5811090751645) for client Spotlight: RequestParameters(timeout: 0.75 sec, requestedComponents: (commands), targetedAppBundleIdentifiers: ["com.zerotier.ZeroTier-UI"], appIntentsRequest: AppIntentsRequest())
par défaut 09:08:54.009172+0100 intelligencecontextd starting RequestID(1353:159 = 5811090751647) for client Spotlight: RequestParameters(timeout: 0.75 sec, requestedComponents: (commands), targetedAppBundleIdentifiers: ["com.zerotier.ZeroTier-UI"], appIntentsRequest: AppIntentsRequest())
par défaut 09:08:56.359237+0100 WindowServer 76403[ReleaseKeyFocusWithID]: [DeferringManager] Updating policy {
advicePolicy: .frontmost;
frontmostProcess: 0x0-0x125125 (ZeroTier) mainConnectionID: 12317B;
} for reason: key thief updated 0
par défaut 09:08:56.359286+0100 WindowServer 76403[ReleaseKeyFocusWithID]: [DeferringManager] Deferring events from frontmost process PSN 0x0-0x125125 (ZeroTier) -> <pid: 2684>
par défaut 09:08:56.359344+0100 WindowServer new deferring rules for pid:414: [
[414-110F]; <keyboardFocus; ZeroTier:0x0-0x125125>; () -> <pid: 2684>; reason: frontmost PSN --> outbound target,
[414-110E]; <keyboardFocus; >; () -> <token: ZeroTier:0x0-0x125125; pid: 414>; reason: frontmost PSN,
[414-110D]; ; () -> <token: ; pid: 414>; reason: Deferring to
]
par défaut 09:08:56.359365+0100 WindowServer [keyboardFocus 0x9c894a080] setRules:forPID(414): [
[414-110F]; <keyboardFocus; ZeroTier:0x0-0x125125>; () -> <pid: 2684>; reason: frontmost PSN --> outbound target,
[414-110E]; <keyboardFocus; >; () -> <token: ZeroTier:0x0-0x125125; pid: 414>; reason: frontmost PSN,
[414-110D]; ; () -> <token: ; pid: 414>; reason: Deferring to
]
par défaut 09:08:56.360485+0100 WindowServer chain did update (setDeferringRules) <keyboardFocus; display: null> containsEndOfChain: YES; [
<token: ; pid: 414>,
<token: ZeroTier:0x0-0x125125; pid: 414>,
<pid: 2684>
]
par défaut 09:09:11.929338+0100 runningboardd Invalidating assertion 418-383-2588061 (target:[app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684]) from originator [osservice<com.apple.coreservices.launchservicesd>:383]
par défaut 09:09:12.035377+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring jetsam update because this process is not memory-managed
par défaut 09:09:12.035398+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring suspend because this process is not lifecycle managed
par défaut 09:09:12.035432+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Set darwin role to: UserInteractive
par défaut 09:09:12.035476+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring GPU update because this process is not GPU managed
par défaut 09:09:12.035546+0100 runningboardd [app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>:2684] Ignoring memory limit update because this process is not memory-managed
par défaut 09:09:12.042479+0100 runningboardd Calculated state for app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>: running-active (role: UserInteractive) (endowments: )
par défaut 09:09:12.042896+0100 ControlCenter Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible
par défaut 09:09:12.042982+0100 gamepolicyd Received state update for 2684 (app<application.com.zerotier.ZeroTier-UI.99543124.99543129(501)>, running-active-NotVisible

Regards,
Alain

[dmkjr]

@joseph-henry This didn't happen when upgrading to 26.1(2) when ZT was already installed. However, on fresh installs on 26.1 and 26.2, this is happening. I did turn off the "full-secure" mode or whatever they call it and it didn't fix the problem. The extension still is not being installed/setup upon installation.

[joseph-henry]

Can you run sudo launchctl print system/com.zerotier.one and show me the output?

When I compare your logs to logs from my machine the main difference I see is par défaut 09:08:34.000768+0100 kernel tcp_connection_summary (tcp_drop:1449)[:61584<->:49152] interface: en0 (skipped: 0)

It looks like some connection is being dropped.

I will say that when I installed macOS 26.0 it completely broke my internet connectivity and it would only work if I turned on the firewall, they fixed that in 26.1. I'm suspecting there is yet another networking bug they've introduced and I don't have much insight into what that could be.

I really want to help you here but I'm not convinced this is an issue on our end. I'm willing to dig into any other logs/data you can provide.

[Bibi74]

Here is the output of the command :

system/com.zerotier.one = {
active count = 1
path = /Library/LaunchDaemons/com.zerotier.one.plist
type = LaunchDaemon
state = running

program = /Library/Application Support/ZeroTier/One/launch.sh
arguments = {
	/Library/Application Support/ZeroTier/One/launch.sh
}

working directory = /Library/Application Support/ZeroTier/One

stdout path = /dev/null
stderr path = /dev/null
default environment = {
	PATH => /usr/bin:/bin:/usr/sbin:/sbin
}

environment = {
	OSLogRateLimit => 64
	XPC_SERVICE_NAME => com.zerotier.one
}

domain = system
minimum runtime = 10
exit timeout = 5
runs = 1
pid = 578
immediate reason = speculative
forks = 1
execs = 2
initialized = 1
trampolined = 1
started suspended = 0
proxy started suspended = 0
checked allocations = 0 (queried = 1)
checked allocations reason = no host
checked allocations flags = 0x0
last exit code = (never exited)

resource coalition = {
	ID = 557
	type = resource
	state = active
	active count = 1
	name = com.zerotier.one
}

jetsam coalition = {
	ID = 558
	type = jetsam
	state = active
	active count = 1
	name = com.zerotier.one
}

spawn type = daemon (3)
jetsam priority = 40
jetsam memory limit (active) = (unlimited)
jetsam memory limit (inactive) = (unlimited)
jetsamproperties category = daemon
jetsam thread limit = 32
cpumon = default

properties = keepalive | inferred program | managed LWCR

}

[Bibi74]

New update

It is working fine. I think the problem was between the keyboard and the chair.....
When the ZT app is started, there only an icon ZT in the screen top right line. Then the network can be selected and the ZT URL is working as expected.

Thanks.
Regards,
Alain

[dmkjr]

@joseph-henry

system/com.zerotier.one = {
active count = 1
path = /Library/LaunchDaemons/com.zerotier.one.plist
type = LaunchDaemon
state = running

program = /Library/Application Support/ZeroTier/One/launch.sh
arguments = {
	/Library/Application Support/ZeroTier/One/launch.sh
}

working directory = /Library/Application Support/ZeroTier/One

stdout path = /dev/null
stderr path = /dev/null
default environment = {
	PATH => /usr/bin:/bin:/usr/sbin:/sbin
}

environment = {
	OSLogRateLimit => 64
	XPC_SERVICE_NAME => com.zerotier.one
}

domain = system
minimum runtime = 10
exit timeout = 5
runs = 1
pid = 531
immediate reason = speculative
forks = 2
execs = 2
initialized = 1
trampolined = 1
started suspended = 0
proxy started suspended = 0
checked allocations = 0 (queried = 1)
checked allocations reason = no host
checked allocations flags = 0x0
last exit code = (never exited)

resource coalition = {
	ID = 495
	type = resource
	state = active
	active count = 1
	name = com.zerotier.one
}

jetsam coalition = {
	ID = 496
	type = jetsam
	state = active
	active count = 1
	name = com.zerotier.one
}

spawn type = daemon (3)
jetsam priority = 40
jetsam memory limit (active) = (unlimited)
jetsam memory limit (inactive) = (unlimited)
jetsamproperties category = daemon
jetsam thread limit = 32
cpumon = default

properties = keepalive | inferred program | system service | managed LWCR | tle system

}

[dmkjr]

Has anyone figured out a work around for this?

[dmkjr]

@joseph-henry I have confirmed a fresh installation is not installing the ZeroTier Extension. I have tried over and over again and it's silently failing. I saw somewhere where 1.18 should support this version of MacOS that handles extensions differently, but couldn't publicly find that anywhere else?