3 ms·
Can you disable secure boot without Apple having a say in the process? I trust myself much more than I trust Apple.
by grishka 5y ago
Can you disable secure boot without Apple having a say in the process? I trust myself much more than I trust Apple.
- Wowfunhappy 5y agoYes, you can.
- gjsman-1000 5y agoThere are three levels of M1 security, Full, Reduced, and Permissive. You can downgrade at any time without internet, but you cannot re-enter Full without contacting Apple over the internet.
- brigade 5y agoNo, you cannot downgrade before creating a user account in setup.
- gjsman-1000 5y agoTechnically true, but no internet is required to make that account, so it’s a minor inconvenience.
- Wowfunhappy 5y agoWait, really? What mechanism makes a user account required? Since the change has to be made from 1TR, I’d have thought you’d never need to log in...
- gjsman-1000 5y agoYou need to log into 1TR with a local admin account, which is used to prevent thieves from wiping the drive and reselling. This process apparently works even if macOS is damaged, meaning your account credentials are likely stored in the enclave which is persistent and has storage inside the chip.
- SpelingBeeChamp 5y ago1TR?
- Wowfunhappy 5y ago"One True Recovery". It's a special recovery environment that the user enters when they hold down the power button on an M1 Mac. It looks identical to a standard recovery environment, but it allows you to do things turn off secure boot.