How to Disable SIP (System Integrity Protection) [Clover/OpenCore]

EliteMacx86

Administrator
Staff member
Joined
Jul 22, 2018
Motherboard
Supermicro X11SPA-T
CPU
Intel Xeon W-3275 28 Core
Graphics
2xAMD RX 580 8GB
OS X/macOS
11.0.x
Bootloader
  1. OpenCore
Mac
  1. MacBook Pro
Mobile Phone
  1. Android
  2. iOS
Add
This section has various settings including UI, boot args, keyboard input, NVRAM settings and System Integrity Protection.

The required NVRAM properties for 15 and 16h Systems includes:

UUIDKeyValueTypeNotes
4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14DefaultBackgroundColor
  • 00000000
  • BFBFBF00
DATA
  • Sets Background color for boot.efi.
00000000
  • Sets the color to Syrah Black.
BFBFBF00
  • Sets the color to Light Gray.
UIScale
  • 01
  • 02
DATA
  • This option is used for UI Sacling.
01
  • Sets it to standard resolution.
02
  • This option is advised if you're using HiDPI.
  • Generally required for FileVault to function correctly on smaller displays.
7C436110-AB2A-4BBB-A880-FE41995C9F82boot-args
  • -v
  • npci=0x2000
  • npci=0x3000
  • alcid=xx
  • agdpmod=pikera
  • debug=0x100
  • keepsyms=1
STRING
  • Adds boot args which provides several functions.
-v
  • Enables verbose mode. Helpful to track the installation progress or when booting.
  • We recommend to use this boot arg.
npci=0x2000
  • Disables PCI debugging related to kIOPCIConfiguratorPFM64.
  • This issue can also fix stuck on "PCI Start Configuration Begin" as there are IRQ conflicts relating to PCI lanes.
npci=0x3000
  • Disables debugging related to gIOPCITunnelledKey in addition.
  • This issue can also fix stuck on "PCI Start Configuration Begin" as there are IRQ conflicts relating to PCI lanes.
alcid=xx
  • Sets Layout ID for AppleALC.
  • The xx represents the layout ID for your codec.
agdpmod=pikera
  • Fixes Black Screen at boot for NAVI GPUs.
  • If you're using and AMD NAVI based GPU, you'll need to use this boot arg.
debug=0x100
  • This disables macOS's watchdog which helps prevents a reboot on a kernel panic.
keepsyms=1
  • This is a companion setting to debug=0x100 that tells the OS to also print the symbols on a kernel panic.
  • This can give some more helpful insight as to what's causing the panic itself.
SystemAudioVolume50DATA
  • Sets System Audio Volume.
  • This volume is for boot-chime and screen reader.
nvda_drv31DATA
  • Enables NVIDIA WebDrivers.
  • Equivalent to Clover's NVIDIAWeb option in System Parameters.
  • If you're using an NVIDIA GPU, you'll need to use this key.
run-efi-updaterNOSTRING
  • Prevents Apple firmware update packages from installing and breaking boot order.
  • These firmwares are only relevant for real Macs and will not work with other devices.
csr-active-config
  • 00000000
  • 03000000
  • FF030000
  • FF070000
  • FF0F0000
  • 67000000
DATA
  • Defines SIP type.
00000000
  • Enables SIP completely. (0x0)
03000000
  • Disable kext signing (0x1) and filesystem protections (0x2)
FF030000
  • Disable all flags in macOS High Sierra (0x3ff).
FF070000
  • Disable all flags in macOS Mojave and in macOS Catalina (0x7ff) as Apple introduced a value for executable policy.
FF0F0000
  • Disable all flags in macOS Big Sur (0xfff) which has another new flag for authenticated root.
67000000
  • Sets the color to Light Gray.
prev-lang:kbden-US:0STRING
  • Sets Keyboard language.
4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102rtc-blacklistDATA

Note:
Do not use "npci=0x2000" with "npci=0x3000". Use only one. Never both.
 
Last edited:

Forum statistics

Threads
518
Messages
4,939
Members
4,456
Latest member
greyfox