Services
Summary
The message details a planned update for Office on macOS, requiring Office add-ins and ODBC drivers to be codesigned with a valid Apple Developer ID. This change, expected in mid-November 2024, may affect workflows using unsigned dynamic libraries. Developers must ensure compliance, and admins should verify and prepare for this update.
Details
Note: If your organization does not use macOS, you can safely disregard this message.
Microsoft Word, Excel, and PowerPoint in Office for macOS Version 16.91 only load dynamic libraries that are codesigned with a valid Apple Developer ID. As a result, Office add-ins or Open Database Connectivity (ODBC) drivers that rely on unsigned or ad-hoc-signed dynamic libraries don't work as intended.
However, most dynamic libraries used with Office apps are already codesigned, so this change is unlikely to affect most users.
In this message, when non-Microsoft products is mentioned, it specifically refers to products and applications that enhance or extend Office functionality (like add-ins or integrations). This doesn't include all non-Microsoft software installed on your device.
When will this happen:
This change is expected to be live in production in mid-November 2024.
How this affects your organization:
Reason for the change:
Microsoft requires executable code from non-Microsoft products be codesigned with a valid Apple Developer ID. This requirement ensures that only verified and properly signed code runs within Office applications, promoting code integrity and compliance with macOS development standards.
Workflow changes for users:
If your workflow uses unsigned dynamic libraries within Word, Excel, or PowerPoint for macOS, it no longer works as intended. You need to get an updated version of the product from the original software developer.
What you can do to prepare:
Actions required for developers:
If your product uses dynamic libraries, make sure they're codesigned with an Apple Developer ID. Unsigned or ad-hoc-signed libraries are no longer allowed to load into Office app processes. For more information on the Apple Developer program and tools, see the Apple Developer Program. Office applications support libraries codesigned for distribution through any Apple-supported distribution mechanism, including direct download by your customers.
Steps for admins:
- Verify Deployed non-Microsoft Products: Check if you have any non-Microsoft products deployed to your users. These products often:
- Extend Office functionality by adding menu or ribbon controls.
- Communicate with other applications to share content with Office.
- Support external data connections such as ODBC.
- Confirm codesigning compliance: Make sure that any non-Microsoft products follow best practices and codesigned any dynamic libraries included in their products. If any libraries aren't codesigned, contact the product developer for updates.
- Monitor system logs: Inspect the system console logs for Library Load Constraint Rejection messages. These messages from macOS identify any dynamic library that the OS rejects from loading into an Office app process.
- Consider proactively blocking all non-Microsoft libraries: To block these libraries, set the Office preference DisableVisualBasicExternalDylibs to true using Mobile Device Management (MDM) software. For more information, see the Apple Platform Deployment guide.
Warning: Blocking all non-Microsoft libraries from running within Visual Basic macros is a significant action and should only be considered if absolutely necessary for your organization's requirements on macOS computers.