• Become a Premium Member for $25/year with no ads to improve your community experience. Upgrade to Pro Account for faster response and no wait times!

GUIDE How to Disable CFG Lock | Unlock MSR 0xE2 Lock | Unlock CFG Lock

EliteMacx86

Administrator
Staff member
Joined
Jul 22, 2018
Messages
8,463
Motherboard
Supermicro X11SPA-T
CPU
Intel Xeon W-3275 28 Core
Graphics
2xAMD RX 580 8GB
OS X/macOS
13.x
Bootloader
  1. OpenCore (UEFI)
Mac
  1. Mac mini
  2. MacBook Pro
Mobile Phone
  1. Android
  2. iOS
How to Disable CFG Lock | Unlock MSR 0xE2 Lock | Unlock CFG Lock

What is CFG Lock?
CFG-Lock is

Should you Disable CFG-Lock?
Removing the CFG Lock enables better compatibility with Mac and better CPU and power management.


CFG Lock prevents OS X from writing to a certain region in your BIOS. OS X does this for power management and other reasons, and if it can't access it, it will not boot.


CFG-Lock on Ivy Bridge and Prior

Ivy Bridge and older Motherboards featuring chipsets such as Z77, do not have a CFG Lock. If you attempt to unlock the CFG Lock on such Motherboards, the firmware doesn't support CFG Lock. You might have a question "If CFG Lock isn't supported on Ivy Bridge and older, how can I boot into macOS without Kernel Panic." Secondly if that's the case, "how have people been able to boot on such Motherboards since the time of OS X." There is an answer to both of your

Available Methods for Unlocking CFG Lock

Following are the methods available for unlocking CFG-Lock. All these methods have been described below.

MethodRemarks
BIOS
  • Easy to unlock
  • Not supported by every Vendor
  • Can only disable CFG-Lock
CFGLock.efi Tool
  • Easy to unlock
  • May not work on every system
  • Can only patch MSR 0xE2 register
  • CFG-Lock will be enabled if you reset your BIOS
  • CFG-Lock will be enabled if you update your BIOS
UEFIPatch Tool
  • Easy to unlock
  • Works on most of the systems
  • May not work where the System requires the same BIOS signature.
  • Certain Motherboards may reject the BIOS with a security violation error when flashing a modded BIOS. SPI Flasher Required in such case.
  • Can patch MSR 0xE2 and 0x1AA registers
  • Supports Sandy Bridge, Ivy Bridge, Sandy Bridge-E, Ivy Bridge-E, Haswell, Haswell-E, Broadwell-E, Skylake, Skylake-X, Kaby Lake, Cascade Lake
  • Supports C422, X299, C620, C621 Chipsets
  • CFG-Lock will remain disabled if you reset your BIOS
  • CFG-Lock will be enabled if you update your BIOS
Ru.efi Tool
  • Can be difficult to unlock
  • Can only patch MSR 0xE2 register
EFI Shell (Manual)
  • Can be difficult to unlock
  • Can only patch MSR 0xE2 register
  • Cannot be used on Laptops and OEM Systems like HP and Lenovo as it often has a locked/encrypted BIOS and the Variables cannot be unlocked.


Recommended Configurations


The following configurations are the only valid configurations. Anything else is likely wrong and should not be used.

If MSR 0xE2 is Locked
CPUmacOSKernelXCPM/AppleXcpmExtraMsrsKernelPm/AppleXcpmCfgLockAppleIntelCPUPM/AppleCpuPmCfgLock
Ivy Bridge and older (including Ivy Bridge-E)AnyNO*YES
HaswellOS X 10.10 and olderYESYES
Haswell and newerOS X 10.11 and newerYESNO


If MSR 0xE2 register is Unlocked or doesn't exist
CPUmacOSKernelXCPM/AppleXcpmExtraMsrsKernelPm/AppleXcpmCfgLockAppleIntelCPUPM/AppleCpuPmCfgLock
AnyAnyNONO
 
Last edited:
i wonder Disable CFG Lock can harmful for others OS? Like windows, linux?
 
  • Like
Reactions: oldman20
  • Like
Reactions: oldman20
I have been done Unlock :)
 

Attachments

  • 2022-08-29 13.13.11.jpg
    2022-08-29 13.13.11.jpg
    126.4 KB · Views: 46
  • 2022-08-29 13.13.15.jpg
    2022-08-29 13.13.15.jpg
    145.5 KB · Views: 42

Forum statistics

Threads
1,935
Messages
18,092
Members
27,834
Latest member
paulo95190g