[pre-release] macOS Monterey

[Andrey1970]

For enable patch - use boot arg -revsbvmm

[Alex HQuest]

1 hour ago, miliuco said:

What's security mode on SSU?

 

As per @Andrey1970 post (see above) yo need RestrictEvents if using ApECID != 0.

 

When using SecureBootModel=x86legacy and ApECID=0, OpenCore gets first 8 bytes of SystemUUID as ApECID.

But when using a specific value from the list other than x86legacy, I think you should try to use a random 64-bit number with a cryptographically secure random number generator as ApECID.

Setting up Security modes on T2 devices: https://support.apple.com/en-us/HT208198

 

As per Configuration.pdf, SBM=Default causes the first 8 bytes off SMBIOS-UUDI to be used. My rationale was since I used Default, changing to the matching SBM off my iMac20,2 would either cause the volume to be already blessed during the upgrade from b7 to b8, or to allow me to bless the b8 system volume while on Recovery. None of these were possible.
 

2 minutes ago, Andrey1970 said:

For enable patch - use boot arg -revsbvmm

So is RestrictEvents.kext needed, then, even with a model specific SBM value other than Default?

[vit9696]

RestrictEvents is not needed (by 99.99% of setups). The boot argument to enable vmm in su is left for some special configurations on legacy Apple hardware. Just forget about its existence.

[miliuco]

@Alex HQuest

Startup Security Utility! Thanks. Sometimes I forget what I know 😂

[Alex HQuest]

While these are my current findings, here's a rundown so far:

SMBIOS = iMac20,2
SecureBootModel = Default
ApECID = 0
* Boot OpenCore-0.7.5 (local compile from Oct 4, 2021 GitHub sources);
* Installed macOS Monterey beta 8. Works just fine;

1. Is it a correct assumption the system is, at this point, running in medium secure mode?

SMBIOS = iMac20,2
SecureBootModel = j185f
ApECID =  (long 64bit number derived from my SMBIOS-UUID field)
* Boot OpenCore-0.7.5 (local compile from Oct 4, 2021 GitHub sources);
* At first normal boot of a pre-installed Monterey beta 8, it "soft fail" to boot and restarts into Recovery move;
* At Recovery, cannot launch Startup Security Utility (SSU) with error message "your firmware is not supported";
* Still at recovery, while connected to the Internet, selected Reinstall macOS;
* macOS Monterey beta 8 reinstalls and boots as expected;
* Manually boot back in Recovery mode, still cannot launch SSU to check secure mode (see error above);

2. Is it a correct assumption the system is, at this point, running in full secure mode?

 

I can see from the open core-2021-10-05-*.txt log files there is a secure image being loaded, although there are also quite a few "errors" - perhaps those are for non-existing NVRAM values?

 

Spoiler

39:828 00:019 AAPL: #[EB.H.IS|!] Err(0xE) <- RT.GV boot-signature 7C436110-AB2A-4BBB-A880-FE41995C9F82

39:850 00:021 AAPL: #[EB.H.IS|!] Err(0xE) <- RT.GV boot-image-key 7C436110-AB2A-4BBB-A880-FE41995C9F82

39:870 00:020 AAPL: #[EB|H:IS] 0

39:890 00:019 AAPL: #[EB|LOG:INIT] 2021-10-05T11:18:14

39:907 00:017 AAPL: #[EB|VERSION] <"bootbase.efi 540.40.4~4 (Official), built 2021-09-21T06:28:48-0700">

39:927 00:019 AAPL: #[EB|BUILD] <"BUILD-INFO[304]:{"DisplayName":"bootbase.efi","DisplayVersion":"540.40.4~4","RecordUuid":"327D0019-54C6-416A-A653-3261ECF57CEE","BuildTime":"2021-09-21T06:28:48-0700","ProjectName":"efiboot","ProductName":"bootbase.efi","SourceVersion":"540.40.4","BuildVersion":"4","BuildConfiguration":"Release","BuildType":"Official"}">

39:947 00:020 AAPL: #[EB.CFG.DEV|!] Err(0xE) <- RT.GV booter-strict-xmlparser 7C436110-AB2A-4BBB-A880-FE41995C9F82

39:965 00:018 AAPL: #[EB|CFG:DEV] r5 0x0 0x0

39:985 00:019 AAPL: #[EB|H:IS] 0

40:001 00:016 AAPL: #[EB|WL:MODE] 0

40:023 00:022 AAPL: #[EB|CFG:ARG] boot-save-log 0x0000000000000002 (0x0000000000000002 < 0xFFFFFFFFFFFFFFFF) default

40:041 00:017 AAPL: #[EB|CFG:ARG] wake-save-log 0x0000000000000002 (0x0000000000000002 < 0x0000000000000002) default

40:063 00:021 AAPL: #[EB|CFG:ARG] console       0x0000000000000001 (0x0000000000000001 < 0x0000000000000001) default

40:082 00:019 AAPL: #[EB|CFG:ARG] serial        0x0000000000000001 (0x0000000000000001 < 0x0000000000000000) default

40:098 00:016 AAPL: #[EB|CFG:ARG] preoslog      0x0000000000000001 (0x0000000000000001 < 0xFFFFFFFFFFFFFFFF) default

40:118 00:019 AAPL: #[EB|CFG:ARG] timestamps    0x0000000000000000 (0x0000000000000000 < 0xFFFFFFFFFFFFFFFF) default

40:137 00:018 AAPL: #[EB|CFG:ARG] log-level     0x0000000000000001 (0x0000000000000001 & 0x0000000000000021) default

40:158 00:021 AAPL: #[EB|CFG:ARG] breakpoint    0x0000000000000000 (0x0000000000000000 & 0x0000000000000000) default

40:177 00:018 AAPL: #[EB|CFG:ARG] kc-read-size  0x0000000000100000 (0x0000000000100000 < 0xFFFFFFFFFFFFFFFF) default

40:197 00:019 AAPL: #[EB|H:IS] 0

40:215 00:017 AAPL: #[EB|WL] 0 0 0x01 0x01   0 0x00

40:235 00:020 AAPL: #[EB|BRD:NV] Mac-AF89B6D9451A490B

40:255 00:019 OCOS: OS set: <null> macOS 11.0

40:276 00:020 OCOS: OS set: Apple Inc. macOS 11.0

40:295 00:019 AAPL: #[EB|B:VAw]

40:310 00:015 AAPL: #[EB|B:IAw]

40:332 00:021 AAPL: #[EB|WL] 0 0 0x01 0x01   2 0x00

40:350 00:017 AAPL: #[EB.BST.IDT|+]

40:371 00:021 AAPL: #[EB|BM] J185FAP

40:392 00:020 AAPL: #[EB.BST.IDT|-]

40:410 00:017 AAPL: #[EB|WL] 0 0 0x01 0x01   3 0x00

40:430 00:019 AAPL: #[EB|WL] 0 0 0x01 0x01   4 0x00

40:447 00:017 AAPL: #[EB|BRD:NV] Mac-AF89B6D9451A490B

40:469 00:022 AAPL: #[EB|WL] 0 0 0x01 0x01   5 0x00

40:488 00:018 AAPL: #[EB.H.CHK|BM] 0x0000000000000000

40:508 00:019 AAPL: #[EB.H.LV|!] Err(0xE) <- RT.GV boot-signature 7C436110-AB2A-4BBB-A880-FE41995C9F82

40:526 00:018 AAPL: #[EB|WL] 0 0 0x01 0x01  23 0x0E

40:547 00:020 AAPL: #[EB.H.LV|!] Err(0xE) <- RT.GV boot-image-key 7C436110-AB2A-4BBB-A880-FE41995C9F82

40:567 00:019 AAPL: #[EB|WL] 0 0 0x01 0x01  24 0x0E

40:586 00:019 AAPL: #[EB.H.LV|!] Err(0xE) <- RT.GV boot-image 7C436110-AB2A-4BBB-A880-FE41995C9F82

40:608 00:021 AAPL: #[EB.H.LV|!] Err(0xE) <- RT.SV- boot-signature 7C436110-AB2A-4BBB-A880-FE41995C9F82

40:624 00:016 AAPL: #[EB.H.LV|!] Err(0xE) <- RT.SV- boot-image-key 7C436110-AB2A-4BBB-A880-FE41995C9F82

40:648 00:023 AAPL: #[EB.H.LV|!] Err(0xE) <- RT.SV- boot-image 7C436110-AB2A-4BBB-A880-FE41995C9F82

40:663 00:015 AAPL: #[EB|H:NOT]

40:686 00:022 AAPL: #[EB|SB:P] 0x0

40:703 00:017 AAPL: #[EB|LIMG:DP] VenMedia(957932CC-7E8E-433B-8F41-D391EA3C10F8)/MemMap(10:100000000-100001000)/DMG_000000004142648C.dmg/VenMedia(004B07E8-0B9C-427E-B0D4-A466E6E57A62)/HD(Part1,SigF6A1D756-27FB-4305-8B60-5D52C8C829CD)/VenMedia(BE74FCF7-0B7C-49F3-9147-01F4042E6842)

40:723 00:019 AAPL: #[EB|LIMG:FP] \90F1C232-45A5-4465-8EE9-4BDE8988918B\System\Library\CoreServices\boot.efi

40:743 00:019 AAPL: #[EB|LIMG:OPT]

40:760 00:016 AAPL: #[EB.B.OBV|BM:+DMG]

40:783 00:022 AAPL: #[EB.B.OBV|BM:+ROS]

40:802 00:019 AAPL: #[EB.OPT.LXF|F] <"\\90F1C232-45A5-4465-8EE9-4BDE8988918B\\System\\Library\\CoreServices\\com.apple.Boot.plist">

40:825 00:023 AAPL: #[EB.LD.LF|IN] 0 1 <"\\90F1C232-45A5-4465-8EE9-4BDE8988918B\\System\\Library\\CoreServices\\com.apple.Boot.plist"> <"0">

40:844 00:018 AAPL: #[EB.LD.OFS|OPEN!] Err(0xE) <"\\90F1C232-45A5-4465-8EE9-4BDE8988918B\\System\\Library\\CoreServices\\com.apple.Boot.plist">

40:863 00:019 AAPL: #[EB.OPT.LXF|LF!] Err(0xE)

40:883 00:019 AAPL: #[EB.OPT.LXF|F] <"Library\\Preferences\\SystemConfiguration\\com.apple.Boot.plist">

40:902 00:018 AAPL: #[EB.LD.LF|IN] 0 1 <"Library\\Preferences\\SystemConfiguration\\com.apple.Boot.plist"> <"0">

40:924 00:022 AAPL: #[EB|KF] <"">

40:942 00:018 AAPL: #[EB|MBA:CL] <"">

40:964 00:021 AAPL: #[EB|MBA:NV] <"-v -lilubetaall agdpmod=pikera -revsbvmm">

40:981 00:017 AAPL: #[EB|MBA:KF] <"">

41:001 00:019 AAPL: #[EB|MBA:OUT] <"-v -lilubetaall agdpmod=pikera -revsbvmm">

41:020 00:019 AAPL: #[EB|LOG:VERBOSE] 2021-10-05T11:18:15

41:039 00:019 AAPL: #[EB|OPT:BM] 0x8a1102

41:060 00:020 AAPL: #[EB.OPT.LXF|F] <"\\90F1C232-45A5-4465-8EE9-4BDE8988918B\\System\\Library\\CoreServices\\PlatformSupport.plist">

41:076 00:016 AAPL: #[EB.LD.LF|IN] 0 1 <"\\90F1C232-45A5-4465-8EE9-4BDE8988918B\\System\\Library\\CoreServices\\PlatformSupport.plist"> <"0">

41:099 00:022 AAPL: #[EB.B.MN|BM:ROS]

41:116 00:017 AAPL: #[EB|WL] 0 0 0x01 0x01  19 0x0E

41:139 00:022 AAPL: #[EB.CS.CSKSD|+]

41:158 00:019 AAPL: #[EB.G.CS|-?] Ok(0)

41:185 00:026 AAPL: #[EB.LD.LF|IN] 0 1 <"<null string>"> <"1">

41:209 00:023 AAPL: #[EB.B.SBS|SZ] 723512

41:241 00:032 AAPL: #[EB|B:SHA] <532b1b77d9fed1cc5723be033a8705963fd52caa>

41:277 00:036 AAPL: #[EB.WL.PWLFNV|!] Err(0xE) <- RT.GV wake-failure 7C436110-AB2A-4BBB-A880-FE41995C9F82

41:301 00:023 AAPL: #[EB.WL.DT|!] Err(0xE) <- EB.WL.PWLFNV

41:326 00:025 AAPL: #[EB.WL.PWLFRTC|NONE]

41:350 00:023 AAPL: #[EB.WL.DT|!] Err(0xE) <- EB.WL.PWLFRTC

41:383 00:033 AAPL: #[EB.LD.LKC|R.1] <"boot\System\Library\KernelCollections\BootKernelExtensions.kc">

41:456 00:072 OC: Kext reservation size info 563000 exe 370000

41:487 00:030 OC: Trying 64-bit XNU hook on boot\System\Library\KernelCollections\BootKernelExtensions.kc

41:617 00:129 OC: Result of 64-bit XNU hook on boot\System\Library\KernelCollections\BootKernelExtensions.kc (51523DCE) is Success

41:647 00:030 OCAK: Read kernel version 21.1.0 (210100)

41:690 00:043 OCAK: 64-bit PanicKextDump replace count - 1

41:711 00:020 OCAK: Patch success kext dump

41:731 00:020 OCAK: 64-bit LapicKernelPanic replace count - 1

41:752 00:020 OCAK: Patch success lapic

41:768 00:016 OCAK: 64-bit LapicKernelPanicMaster replace count - 1

41:790 00:021 OCAK: Patch success extended lapic

41:808 00:018 OCAK: 64-bit PowerStateTimeout replace count - 1

41:830 00:022 OCAK: Patch success inline power state

41:852 00:021 OCAK: Found jettisoning fileset

41:883 00:031 OCAK: BusFreq = 99789473Hz, BusFCvtt2n = 43040284379, BusFCvtn2t = 428592523

41:904 00:020 OCAK: TscFreq = 3792000000Hz, TscFCvtt2n = 1132639054, TscFCvtn2t = 16286515998

41:922 00:018 OCAK: 64-bit ProvideCurrentCpuInfoZeroMsrThreadCoreCount replace count - 2

42:043 00:121 OCAK: Local relocs 852 on FFFFFF8004151000

42:062 00:018 OC: Prelinked injection Lilu.kext (Arbitrary kext and process patching on macOS) - Success

42:084 00:022 OCAK: Patching invalid size 2000 with 183B000 for com.apple.iokit.IOACPIFamily

42:110 00:026 OCAK: Local relocs 504 on FFFFFF80041DA000

42:133 00:022 OC: Prelinked injection VirtualSMC.kext (SMC emulator layer) - Success

42:164 00:030 OCAK: Patching invalid size 2B000 with 1395000 for com.apple.iokit.IOPCIFamily

42:198 00:033 OCAK: Local relocs 5642 on FFFFFF8004203000

42:247 00:049 OC: Prelinked injection AppleALC.kext (Native macOS HD audio for not officially supported codecs) - Success

42:269 00:021 OCAK: Local relocs 313 on FFFFFF80043A3000

42:292 00:023 OC: Prelinked injection RestrictEvents.kext (Blocking of unwanted processes causing compatibility issues on different hardware and unlocking the support for certain features restricted to other hardware.) - Success

42:320 00:028 OCAK: Local relocs 1974 on FFFFFF80043B6000

42:349 00:029 OC: Prelinked injection WhateverGreen.kext (Various patches necessary for certain ATI/AMD/Intel/Nvidia GPUs) - Success

42:370 00:020 OC: Prelinked injection AGPMInjector.kext (Apple Graphics Power Management injector) - Success

42:390 00:020 OCAK: Patching invalid size 17000 with 162F000 for com.apple.iokit.IONetworkingFamily

42:423 00:033 OCAK: Local relocs 669 on FFFFFF8004472000

42:442 00:019 OC: Prelinked injection IntelMausi.kext (Intel Ethernet LAN driver for macOS) - Success

42:471 00:028 OCAK: Local relocs 337 on FFFFFF80044B2000

42:489 00:018 OC: Prelinked injection SMCProcessor.kext (SMC emulator layer (Processor plugin)) - Success

42:510 00:020 OC: Prelinked injection USBPorts.kext (USB Ports headless kext) - Success

42:527 00:017 OC: Prelink size 70651904 kext offset 67047424 reserved 3604480

42:547 00:019 OCAK: KC TEXT is 65536 bytes with 63800 Mach-O headers need 632

42:597 00:050 OCAK: 64-bit AppleIoMapper replace count - 1

42:617 00:019 OCAK: Patch success com.apple.iokit.IOPCIFamily AppleIoMapper

42:637 00:020 OCAK: Patching invalid size 6000 with 2781000 for com.apple.driver.AppleRTC

42:653 00:015 OCAK: 64-bit DisableRtcChecksum64 replace count - 4

42:675 00:022 OCAK: Patch success com.apple.driver.AppleRTC DisableRtcChecksum

42:803 00:127 OC: Prelinked status - Success

42:944 00:141 AAPL: #[EB.LD.LKFS|-?] Ok(0)

42:967 00:022 AAPL: #[EB.LD.LKC|-?] Ok(0)

42:988 00:021 AAPL: #[EB|BST:REV1]

43:008 00:019 OCABC: GetVariable csr-active-config - Not Found

43:029 00:021 AAPL: #[EB|CSR:IN] 0x00000040

43:056 00:026 AAPL: #[EB|CSR:OUT] 0x00000040

43:075 00:019 AAPL: #[EB.BST.FBS|+]

43:098 00:022 AAPL: #[EB.BST.FBS|ADSZ] 0

43:118 00:020 AAPL: #[EB.BST.FBS|KSSZ] 0

43:144 00:025 AAPL: #[EB|SB:SBGMFNS] j185fap.im4m

43:171 00:026 AAPL: #[EB|RH:PF] usr\standalone\OS.dmg.root_hash

43:201 00:030 AAPL: #[EB|RH:MF] <"usr\\standalone\\OS.dmg.root_hash.j185fap.im4m">

43:231 00:030 AAPL: #[EB.LD.LF|IN] 0 1 <"usr\\standalone\\OS.dmg.root_hash"> <"0">

43:257 00:025 AAPL: #[EB.LD.OFS|OPEN!] Err(0xE) <"usr\\standalone\\OS.dmg.root_hash">

43:284 00:027 AAPL: #[EB.RH.LRH|P!] Err(0xE) <- EB.LD.LF

43:308 00:023 AAPL: #[EB.BST.FBS|!] Err(0xE) <- EB.RH.LRH

43:331 00:022 OCSMC: SmcReadValue Key 4D535463 Size 1

43:350 00:019 OCSMC: SmcReadValue Key 4D534163 Size 2

43:374 00:023 AAPL: #[EB|LOG:DT] 2021-10-05T11:18:17

43:401 00:026 AAPL: #[EB|LOG:EXITBS:START] 2021-10-05T11:18:17

 

Edited October 5, 2021 by Alex HQuest

[miliuco]

@Alex HQuest

I think SSU doesn't work in hacks, only in real Macs, in my hack it has always displayed the same message as in yours. Correct me if I'm wrong.

For now, the only way I know to see Apple secure boot mode state in the hack is

nvram 94b73556-2197-4702-82a8-3e1337dafbfb:AppleSecureBootPolicy

Although I have read @vit9696 (I guess) somewhere that secure boot must be medium security even when the above command returns %02 but I don't know why.

You know that SBM=Default now sets the same model as in SMBIOS so Default and j185f in theory do the same.

 

[obus]

5 hours ago, vit9696 said:

RestrictEvents is not needed (by 99.99% of setups). 

But still mandatory for us using MacPro7,1 for getting  PCI Expansion view and RAM view correctly I suppose?

Edited October 5, 2021 by obus

[pet1]

26 minutes ago, obus said:

But still mandatory for us using MacPro7,1 for getting  PCI Expansion view and RAM view correctly I suppose?

That's just cosmetic and redundant. All devices are already listed in their appropriate category.

[obus]

Works nice on C422 too. Installed from USB without hickups with SMBIOS MacPro7,1.

Use RestrictEvents just because I'm so vain and don't like messages about memory error even if it's cosmetic and redundant😉

[gujiangjiang]

Hash mismatch detected on volume disk1s5. 

notification appears shortly after i log into my mac book. Any idea on how to solve it?

 

[chris1111]

I am Verry Happy today  I receive my AMD Visiontek Radon RX 560 from USA

 

This card is dedicated for my Main PC HP Prodesk 600 G1 with a Low profile graphics card

The card is Native support Big Sur 11 and Monterey 12

This card run Like a swiss Clock 

 

 

Metal Score Big Sur 11 😀

https://browser.geekbench.com/v5/compute/3486428

Edited October 6, 2021 by chris1111

[Wayang-NT]

[miliuco]

@pet1 @obus

I don’t know if it’s correct to say that RestrictEvents in MP7,1 is only cosmetic and redundant. Without this kext, memory tab in About this Mac displays ghost memory slots that really don’t exist. Also there is a useful feature: installing RestrictEvents is a lot easier than fill in memory devices in config.plist.

OpenCore developers prefer RestrictEvents over memory devices when using MP7,1.

@chris1111

Congratulations for your new dGPU!

GeekBench score is really good.

Enjoy!

[eSaF]

Done - no drama. 

[Shaneee]

Easy Peasy

[Djlild7hina]

Yup just works

 

[Anto65]

No kext, SBM disbled, set timeout 1 sec. he made himself while I was having dinner

 

[dehjomz]

With the under-the-hood changes to OC 0.7.4 release version (compared to the earlier Betas), Monterey Beta9 was the smoothest update in weeks. 

 

No need to spoof j160 SecureBootModel to see the update, everything went smoothly with the 'Default' SecureBootModel.  

 

Many thanks to the OC developers for their continual progress.  And many thanks to Apple for Macintosh. 

Edited October 6, 2021 by dehjomz

[chris1111]

No issue here Beta 9 😁 OC 0.7.5

Edited October 6, 2021 by chris1111

[Partime]

I'm on OC 0.7.4, but had to change from imacpro1,1 to imac19,1 to do the update.

 

Anyone know why imac19,1 would kill my streaming video and change some of my USB ports?

 

Any recommendation on a SBIOS for an I9 with Radeon 5700xt that would work with upgrades & my streaming video would still work?

[Derty]

OC 0.7.4 all correct

 

[chris1111]

Thank you @miliuco, I almost always use very low powerful graphics cards and never do geekbench graphics

and if you tell me that it is good I am happy 

Edited October 6, 2021 by chris1111

[eSaF]

@parttime - Changing to another Mac Model as you've discovered will alter the previous mapped USB layout, you'll need to remap the layout again or try this this one attached for 19.1 it may help if you don't want to go through the hassel.

To activate DRM to get streaming videos, see instructions inside the folder. Good luck.

 

PS - Don't forget to clean NVRAM after changes before booting to Desktop.

USB-folder.zip

Edited October 6, 2021 by eSaF

[chris1111]

Update Beta 9 On my DELL Optiplex 790 and reinstall the Geforce Kepler patch everything works Perfectly 

[miliuco]

1 hour ago, Partime said:

I'm on OC 0.7.4, but had to change from imacpro1,1 to imac19,1 to do the update.

 

Anyone know why imac19,1 would kill my streaming video and change some of my USB ports?

 

Any recommendation on a SMBIOS for an I9 with Radeon 5700xt that would work with upgrades & my streaming video would still work?

OC 0.7.4 official build includes features for fix Monterey updates without changing SecureBootModel or SMBIOS. Sure do you have last 0.7.4?

For most users, SecureBootModel as Default must work, it sets SecureBootModel as you have set SMBIOS model. Let Default and tune only SMBIOS.

 

i9 + RX5700XT is a good machine to have iMacPro1,1 or MacPro7,1 SMBIOS. But in theory it must work fine with iMac19,1 also.

iMac19,1 lacks DRM video from Safari and TV app fails. iMacPro1,1, and MacPro7,1 are able to fix DRM better.

 

Regarding BIOS, iMac19,1 can have iGPU enabled and set in headless mode in config.plist but the other 2 SMBIOS must have iGPU disabled in BIOS and no code for iGPU in config.plist.

Regarding USB ports, if you have USBMap.kext or USBPorts.kext you must change inside them the Info.plist file each time you change SMBIOS model to be the same. Remapping USB ports again is not necessary. Look at the kext (USBMap or USBPorts) >> Show package contents >> Contents >> open Info.plist file and look for 2 instances of Mac model to change them to the current SMBIOS model. Without this change, USB ports work in a different way.

Edited October 6, 2021 by miliuco