From cfe58b0a1c89c72e3bdcd328d2feb425fa94906f Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 21:06:07 +0300 Subject: [PATCH 1/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase --- config-laptop.plist/coffee-lake-plus.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config-laptop.plist/coffee-lake-plus.md b/config-laptop.plist/coffee-lake-plus.md index 5cdf6f2fc..6dcf23f41 100644 --- a/config-laptop.plist/coffee-lake-plus.md +++ b/config-laptop.plist/coffee-lake-plus.md @@ -464,6 +464,9 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info From 41c09c5f02ea7409a4e17a7071ded940d0ed0596 Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 21:10:59 +0300 Subject: [PATCH 2/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase --- config-laptop.plist/coffee-lake.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/config-laptop.plist/coffee-lake.md b/config-laptop.plist/coffee-lake.md index e82aa9cce..d51b90d13 100644 --- a/config-laptop.plist/coffee-lake.md +++ b/config-laptop.plist/coffee-lake.md @@ -434,6 +434,8 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) ::: ::: details More in-depth Info From 21af405690d7152197e5ef1b68d7daf929d1c67e Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 21:12:05 +0300 Subject: [PATCH 3/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase fixed formatting --- config-laptop.plist/coffee-lake.md | 1 + 1 file changed, 1 insertion(+) diff --git a/config-laptop.plist/coffee-lake.md b/config-laptop.plist/coffee-lake.md index d51b90d13..009d223e1 100644 --- a/config-laptop.plist/coffee-lake.md +++ b/config-laptop.plist/coffee-lake.md @@ -436,6 +436,7 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll **Note for macOS Sonoma 14 and above**: Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info From b6fd3fe035dee210ecc5c56cfa296f55d3c5076c Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 21:13:19 +0300 Subject: [PATCH 4/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase --- config-laptop.plist/icelake.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config-laptop.plist/icelake.md b/config-laptop.plist/icelake.md index 360eb824e..6b12c6f89 100644 --- a/config-laptop.plist/icelake.md +++ b/config-laptop.plist/icelake.md @@ -426,6 +426,9 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info From a12868ed19566960236098cf79e58c78a9ccb2b7 Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 21:27:16 +0300 Subject: [PATCH 5/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase and add correct smbios for sonoma --- config-laptop.plist/kaby-lake.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/config-laptop.plist/kaby-lake.md b/config-laptop.plist/kaby-lake.md index 8340fc547..19259a086 100644 --- a/config-laptop.plist/kaby-lake.md +++ b/config-laptop.plist/kaby-lake.md @@ -513,6 +513,9 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info @@ -658,6 +661,15 @@ For this Kaby Lake example, we'll chose the MacBookPro14,1 SMBIOS - this is done | MacBookPro14,3 | Quad Core 45W | iGPU: HD 630 + dGPU: Radeon Pro 555X/560X | 15" | Yes | | iMac18,1 | NUC Systems | iGPU: Iris Plus 640 | N/A | No | +**Note for macOS 14 Sonoma and above**: Since Kaby Lake and Amber Lake are still natively supported in Sonoma and above you can still run it but you'll need to use a Coffee Lake SMBIOS that is closest to your configuration from the table below. + +| SMBIOS | CPU Type | GPU Type | Display Size | Touch ID | +| :--- | :--- | :--- | :--- | :--- | +| MacBookPro15,1 | Hexa Core 45W | iGPU: UHD 630 + dGPU: Radeon Pro 555X/560X | 15" | Yes | +| MacBookPro15,2 | Quad Core 15W | iGPU: Iris 655 | 13" | Yes | +| MacBookPro15,3 | Hexa Core 45W | iGPU: UHD 630 + dGPU: Vega 16/20 | 15" | Yes | +| Macmini8,1 | NUC Systems | HD 6000/Iris Pro 6200 | N/A | No | + Run GenSMBIOS, pick option 1 for downloading MacSerial and Option 3 for selecting out SMBIOS. This will give us an output similar to the following: ```sh From 7cb07bb7d9febacdfc789d26d58229206fa4ce34 Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 23:23:27 +0300 Subject: [PATCH 6/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase --- config.plist/coffee-lake.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config.plist/coffee-lake.md b/config.plist/coffee-lake.md index 0773fc219..716b5c3a1 100644 --- a/config.plist/coffee-lake.md +++ b/config.plist/coffee-lake.md @@ -402,6 +402,9 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info From 3cc993d48bd78e891fbe74921cd60a0c3f1fd02b Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 23:24:54 +0300 Subject: [PATCH 7/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase --- config.plist/comet-lake.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config.plist/comet-lake.md b/config.plist/comet-lake.md index 48880b48e..2f50e6aed 100644 --- a/config.plist/comet-lake.md +++ b/config.plist/comet-lake.md @@ -435,6 +435,9 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info From 38cdf137b30576ed52014f9f1aefaa71d8b5ba4a Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 23:30:51 +0300 Subject: [PATCH 8/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase and platform info for kaby --- config.plist/kaby-lake.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/config.plist/kaby-lake.md b/config.plist/kaby-lake.md index 65e5441b2..f2210b65f 100644 --- a/config.plist/kaby-lake.md +++ b/config.plist/kaby-lake.md @@ -377,6 +377,9 @@ Security is pretty self-explanatory, **do not skip**. We'll be changing the foll | SecureBootModel | Default | Leave this as `Default` for OpenCore to automatically set the correct value corresponding to your SMBIOS. The next page goes into more detail about this setting. | | Vault | Optional | This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive | +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip (of which we don't physically have) during the second install phase (i.e after the reboot into macOS installer from the local disk), you'll need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + ::: ::: details More in-depth Info @@ -536,6 +539,12 @@ For this Kaby Lake example, we'll chose the iMac18,1 SMBIOS - this is done inten | iMac18,1 | Used for computers utilizing the iGPU for displaying | | iMac18,3 | Used for computers using a dGPU for displaying, and an iGPU for computing tasks only | +**Note for macOS 14 Sonoma and above**: Since Kaby Lake is still natively supported in Sonoma and above you can still run it but you'll need to use a Coffee Lake SMBIOS that is present in the table below. + +| SMBIOS | Hardware | +| :--- | :--- | +| iMac19,1 | For Mojave and newer | + Run GenSMBIOS, pick option 1 for downloading MacSerial and Option 3 for selecting out SMBIOS. This will give us an output similar to the following: ```sh From 35f30af73eb9114bce908ba35406acf1015bdcc8 Mon Sep 17 00:00:00 2001 From: Mysticnotthemighty Date: Sun, 13 Oct 2024 23:32:45 +0300 Subject: [PATCH 9/9] Add the notice about SecureBootModel on Sonoma and above to avoid bootloop during second install phase --- config.plist/security.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/config.plist/security.md b/config.plist/security.md index 8627db39d..ade41a579 100644 --- a/config.plist/security.md +++ b/config.plist/security.md @@ -10,6 +10,10 @@ OpenCore by default has [Apple Secure Boot](https://dortania.github.io/OpenCore- This enables security features such as the verification of macOS' `boot.efi`, with the side effect of restricting which macOS versions OpenCore will boot. * Big Sur and Above (11.0+): The recommended value is `Default`. + +**Note for macOS Sonoma 14 and above**: +Due to macOS polling for more information from the Mac's T2 chip of which we don't have you need to set SecureBootModel to `Disabled` for the duration of the install, after successfully booting into the desktop you can set SecureBootModel back to `Default`, this also applies to updating the OS to a minor release (i.e 14.6 -> 14.7) or a major release (i.e 14.7 -> 15.0) + * High Sierra-Catalina (10.13-10.15): * If your model is not listed below, set to `Disabled`. * If running NVIDIA Web Drivers, set to `Disabled`.