Recover User Data when you don’t have the user’s FileVault Password
Do you need to recover user data with Target Disk Mode, but you don’t have the user’s FileVault 2 password?
I will show you how to unlock FileVault 2 after you connect the Mac using Target Disk Mode. This can be very helpful for IT Departments that need to access user data when an employee is let go and you don’t have the user’s password.
How to boot a Mac into Target Disk Mode (TDM)
Think of Target Disk Mode as if you are turning your Mac into an External Hard Drive. Once you plug the Target Mac into the host Mac using a USB/Thunderbolt Cable you can access all of the Target Mac’s files on the Host Mac. It’s really a great tool for moving data, especially useful for fast file backup, transfers or data recovery.
Apple’s instructions for how to Boot your Mac to Target Disk Mode.
Once you have booted your Mac into Target Disk Mode and it’s pluged into the host Mac you will be see a GUI message after a few moments.
The unlock message above is what you will see with a T2 Mac. You will get this message if you are encrypted or not encrypted with a password. The users listed will be securetoken enabled users.
FileVault 2 Target Disk Mode GUI unlock pop-up for a non T2 Mac.
If the Mac is not encrypted and doesn’t have a T2 the drive will just mount as Macintosh HD on the Desktop.
If you know the user’s password, type it in and the drive will mount.
Attempting to unlock FileVault 2 TDM “diskutil apfs unlockVolume -passphrase”
You may have used this command in the past if you needed to unlock FileVault in the Recovery Partition.
Unlocking the drive with the PRK and Personal Recovery User.
After typing in the command you will have a prompt that says Passphrase. Paste or type the Mac’s Recovery Key in and hit enter.
NOTE: for the PRK you have to include all the dashes and use all CAPS.
If you don’t you will get this error
Passphrase incorrect or user does not exist
Once you type in the correct PRK you will be see this message.
Unlocked and mounted APFS Volume attached via Target Disk Mode
Copying Files
One last note if you need to copy files from the user’s folder. If you navigate to the user’s folder and see that you do not have permission to view Desktop, Documents or Downloads. This is not a problem.
Permission to view is denied. No problem just copy the entire user folder over.
All you need to do is copy the entire user folder over to the Host Mac. You will be prompted to enter in an admin password. This is the admin password on the Host Mac not the Target Mac. Once the User folder is copied over you will have access to all files.
Thanks
I wanted to thank someone who clarified this procedure and also helped test to make sure it worked.
Thank you Mr. Anonymous!!!
I hope this article has helped you. If you have any questions or comments please don’t hesitate to Contact Me.
How to Restore BridgeOS on a 2018+ T2 Mac using Apple Configurator 2. How to Boot your Mac into DFU Mode
Did a macOS Update Brick your T2 Mac? I will Show you how to Boot your Mac into DFU Mode so you can Restore BridgeOS.
This article will go over how to restore BridgeOS on your T2 Mac. This is not something that you will ever normally have to do. Restoring or reinstalling BridgeOS firmware would only be needed in the following situations.
1. Failed macOS Upgrade
2. Failed macOS Combo or Delta Update
3. Failed macOS Security Update
4. Failed macOS Reinstall
5.Failed BridgeOS or Failed Firmware Update
6. “Command Option R” fails to boot your T2 Mac to the newest version of macOS Internet Recovery. (Example: 10.14 is out but the Mac boots to 10.13)
2. Warning about “Restore” Full Erase! Please Read
The new version of Apple Configurator 2 (2.12.1+) and newer has different options!
Actions > Advanced > Revive Device = Reinstall BridgeOS Only – Revive should be the first option to try. If a Revive does not work, move to the second option Restore.
Actions > Restore = Reinstall BridgeOS & ERASE OS AND USER DATA! – This option will reinstall BridgeOS and erase the SSD. This option is for more serious issues where the Mac does not respond after installing an update.
3. List of T2 Compatible Macs
This is a list of T2 Mac that you can can have BridgeOS restored.
2019-2020 16″ MacBook Pro
2018-2019 13″ & 15″ Macbook Pro
2018-2020 MacBook Air
2018 Mac Mini
2020 iMac
2017 iMac Pro
2019 Mac Pro
4. How do I find the BridgeOS Version on my T2 Mac?
From support.apple.com/en-us/HT203001 – “Choose Apple menu > About This Mac. This opens an overview of your Mac, including your Mac model, processor, memory, serial number, and version of macOS. To see the greater detail provided by the System Information app, click the System Report button.”
About my Mac > System Report > BridgeOS version = 17.16.10525
5. Setup and Cable Requirements before you begin.
You will need to meet the following requirements –
(The Host Mac will do the work and the Target Mac is the Mac you need to Restore)
1. USB-C Mac as the Host Machine.
2. The Host Mac must have at least macOS 10.13.5 and Apple Configurator 2.6 or newer installed. (Version 2.12.1 is the latest)
3. The Host Mac Must be on the same OS version as the Target Mac that you want to Restore. (Example – If the Target Mac is on 10.15 you will need the Host Mac to be on 10.15. If the Host Mac is on 10.14 you will get an error 10)
3. Internet access on the Host Mac – “You may need to configure your web proxy or firewall ports to allow all network traffic from Apple”
4. USB-C to USB-C Cable – The white Apple USB-C Charge will work fine.(USB-C Cable MUST Support Power & Data). Apple notes that a Thunderbolt 3 to Thunderbolt 3 cable is not supported but I’ve tested it and it works fine.
5. The Host Mac can have the cable plugged in anywhere.
6. The Target Mac MUST have the USB-C Cable Plugged in to the Left Hand side USB-C port. This is First port in line (Port closest to the front of the Mac or trackpad) If you are still confused look at the picture below.
If you don’t meet all the prerequisites booting to DFU Mode or BridgeOS Upgrade might fail.
6. Download Apple Configurator 2
Download Apple Configurator 2 app. Version 2.6 or higher is required.
If you do not have Apple Configurator 2, you can download it now from the Mac App Store with this link.
With all the startup keyboard commands you can issue a Mac, booting into DFU Mode should be pretty simple right?
NOPE!
You have to follow a very particular sequence to get this to work. I have attempted to find the exact way to get this to work every time. Even then sometimes the system will refuse to Boot into DFU mode.
Me trying to get my T2 Mac into DFU mode without turning it off or booting into macOS.
Apple’s Instructions
You can find Apple’s instructions for booting into DFU mode here.
Apple’s instructions for booting your T2 MacBook Pro into DFU mode. Image: Apple Inc
8. My Instructions for the MacBook Pro & Air
Bottom line, it’s hard to get your T2 Mac into DFU mode. You could try Apple’s instructions 10 times and STILL not get into DFU mode.
Once you have meet all of the pre requisites above, follow the instructions below to get into DFU Mode every time.
1. The Target Mac must be OFF to begin.
2. Press the Power button and hold for 1 second.
3. While STILL holding power immediately hold down RightShift, Left Control and Left Option.
Hold down all 4 keys for 8 Seconds (count 1 one thousand) then let go of all keys.
You will not see anything on the Target Mac screen.
Keep an eye on the Host Mac’s Apple Configurator 2 Application. The App should say “Connect Devices”
When the Target Mac is booted into DFU mode correctly, the host will show a big DFU icon in Apple Configurator 2.
After you see the DFU picture pop up on the Host Mac you can let go of the keys.
DFU T2 Booting Instructions – Make sure the Mac is OFF. Hold down power for 1 second then also hold Right Shift, Left Control and Left Option for 8 total seconds then let go.
9. Instructions for the iMac (2020) & iMac Pro (2017)
The iMac 2020 & iMac Pro 2017 are a little different yet are super simple to get into DFU Mode.
1. Disconnect the power cord from the iMac Pro or Mac Mini.
2. Plug USB-C/Thunderbolt cable into the USB-C port next to the Ethernet Port.
3. Plug the other end into the Host Mac.
4. While holding down the power button, connect the iMac Pro or Mac Mini to power and continue to hold the power button for about 3-5 seconds
5. You should now see the DFU logo on the Host Mac.
10. Instructions for the Mac Mini (2018)
The Mac Mini 2018 instructions are close to the iMac Pro but the USB-C port that you need is next to the HDMI port instead of the Ethernet port like the iMac Pro.
How to boot a Mac Mini 2018 into DFU mode to restore BridgeOS – Image: Apple Inc
1. Disconnect the power cord from the Mac Mini.
2. Plug USB-C/Thunderbolt cable into the USB-C port next to the HDMI Port.
3. Plug the other end into the Host Mac.
4. While holding down the power button, connect the Mac Mini to power and continue to hold the power button for about 3-5 seconds
5. You should now see the DFU logo on the Host Mac.
11. Instructions for the Mac Pro (2019)
The Mac Pro 2019 instructions were just added to the DFU instruction guide.
How to boot a Mac Pro 2019 into DFU mode to restore BridgeOS – Image: Apple Inc
1. Disconnect the power cord from the Mac Pro.
2. Plug USB-C/Thunderbolt cable into the USB-C port farthest from the power button.
3. Plug the other end into the Host Mac.
4. While holding down the power button, connect the Mac Pro to power and continue to hold the power button for about 3-5 seconds.
5. You should now see the DFU logo on the Host Mac.
12. You made it! Apple Configurator 2 Steps
The hard part is now over. Now we can restore BridgeOS on the Target Mac. When you first open Apple Configurator 2 the screen will look like this.
This is what you will see if the Mac is NOT booted to DFU mode.
Once your Mac is booted to DFU mode, you will see this screen on Apple Configurator 2. You are now ready for the next step.
When you see a big DFU icon when your Mac is properly booted into DFU Mode.
13. Begin BridgeOS Revive
You are now ready to restore BridgeOS on the Target Mac. Click Actions > Advanced > Revive Device.
(DO NOT CLICK RESTORE YET) Only run Restore if Revive does not work. (Restore Erases your Hard drive!!!!!!!)
You will now see a warning message. Do you want update “iBridge” to the latest firmware version? You cannot undo this action. This means that once you update BridgeOS/iBridge you cannot go back to the previous version.
An updated Apple support document shows that we now have 2 different options.
Actions > Advanced > Revive Device = Reinstall BridgeOS Only
Actions > Restore = Reinstall BridgeOS & ERASE OS AND USER DATA!
AC2 version 2.11 – 2.12.1 ??? New Message that warns that the BridgeOS Restore will ERASE ALL OS AND USER DATA!
The message below is what you will see on at least AC2 version 2.10 and below. OR if you click Revive instead of restore.
AC2 Version 2.10 and below – Do you want to restore and update “iBridge” to the latest firmware version?
Click the Restore Button to begin. Step one will download the latest BridgeOS update from Apple.
Step 1. Downloading the latest BridgeOS from Apple.
Step 2. Unzipping BridgeOS
Step 2. Unzipping the BridgeOS Update.
Step 3. Installing BridgeOS Update.
Step 3. Installing BridgeOS
14. Finishing Up
If you would like to see more information you can click View and see a new activity window.
Apple Configurator 2 Activity window.
The entire process will only take about 4-10 Minutes. Most of the time is spent downloading the 400-600MB BridgeOS Update. The Unzip and Install parts only take about 1 minute each. When complete the Mac will automatically Boot up.
NOTE: with version 2.12.1, the entire process may never finish correctly and get stuck at the final part (probably a bug). Once your Target Mac is at the login window the restore is complete. The error that you might see is 0xFA5 (4005)
15. Can I Downgrade from a Beta Version of BridgeOS to a Production version? i.e Bug Sur BridgeOS to Catalina Version?
Let’s say that you installed Big Sur Beta 6, and are now having a ton of problems. You probably want to downgrade to Catalina so you can work again. The only problem is, you are still on Big Sur Beta 6 BridgeOS version 18.16.12370. Keep in mind, your Mac SHOULD still work fine with this version. An example of this is if you have Catalina 10.15.6 installed on your Mac, your BridgeOS version is 17.16.16610. Let’s say that you need to test something on version 10.15.3. After installing Catalina 10.15.3, your BridgeOS version will NOT be downgraded to the period correct version of 17.16.13050. It will run just fine on the 10.15.6 version of 17.16.16610 BridgeOS. The same is the case if you have a Big Sur Beta version of BridgeOS and you downgrade to Catalina.
The answer is YES, follow the link below for an explanation.
I can’t get my Mac to boot into DFU mode. This is the toughest part of the whole process as I mentioned above. Keep trying the steps I listed above. Sometimes it takes multiple attempts to get his to work.
You can use System Information to see if the USB-C port lists your Mac in DFU Mode.
System Information showing a Mac plugged in booted to DFU Mode.
BridgeOS Restore Error 79- The OS Cannot be restored on this device. The Operation couldn’t be completed. (AMRestoreErrorDomain error 79 – Failed to handle message type StatusMsg) [AMRestoreErrorDomain – 0x4F (79)] – If you get this error it means that the BridgeOS update has failed and is unable to complete. The system will be unable to boot. When powered on the screen will be black. The Mac will have to be brought to an Apple Store for Service.
BridgeOS Restore Error – The OS Cannot be restored on this device. The Operation couldn’t be completed.
BridgeOS Restore Error 10 – The BridgeOS Restore failed! This is most likely because the host Mac was 1 or 2 OS Versions behind the Target Mac. The Host and Target Mac need to be on the same OS Version.
If your Target Mac is on 10.15, then your Host Mac needs to be on 10.15.
The OS Cannot be restored on this device.
The operation couldn’t be completed. (AMRestoreErrorDomain error 10 – Failed to handle message type StatusMsg) [AMRestoreErrorDomain – 0xA (10)]
BridgeOS Restore Error 10 – The Host and Target Mac need to be on the same OS Version.
Host Mac and Target Mac Disconnected during restore. – Error 4005
The OS Cannot be restored on this device.
Gave up waiting for device to transition from RestoreOS state to BootedOS State. [com.apple.MobileDevice.MobileRestore – 0xFA5 (4005)]
BridgeOS Restore Error 0xFA5 (4005)
This error will come up when the restore process has been interrupted.
Or, you might get this using Apple Configurator 2 version 2.12.1, as the process never seems to complete properly. If the Target Mac awakes to the login window the process is complete even though the progress bar is at 100%. After unplugging the USB-C cable you will get the error above.
Apple Configurator 2 Reports RECOVERY instead of DFU Status.
Apple Configurator 2 Reports RECOVERY instead of DFU Status.
If you see RECOVERY this means that BridgeOS is unable to boot and is the default status when you power on the Mac.
Failed BridgeOS Restore due to OS Version Mismatch! The Target Mac is a previous OS i.e 10.14 trying to restore a 10.15 Mac, the update will fail with an Error 10
If the Mac already failed the Upgrade, it could already be in this status. If so, you can attempt a BridgeOS restore.
Configurator could not perform the requested action. Apple Controller devices do not support this action.
This means that you selected Actions > Update, which is not supported. You need to select Actions > Advanced > Revive Device
Apple Configurator 2 BridgeOS Firmware Download Location.
Thanks MrMacintosh Reader Max C for letting me know the location of the BridgeOS Firmware files.
This page will be updated when new 10.15 new information or links come in.
WWDC 2019
WWDC is here again! On Monday, June 3rd, 2019 Apple Released macOS 10.15 Catalina. The first question MacAdmins have is, what changes do I need to know about and how will they affect my macOS deployments? Hopefully, I will help you answer that question with this article. I am following the same format as my previous Notarization Index post. MacAdmins have told me they really liked having all the important information on a topic in one place. MacAdmins like Robert Hammem, Charles Edge and Rich Trouton are already crushing it by gathering information on all the latest changes. In this post, I will keep an updated index of changes and links to keep you informed of the latest public information regarding macOS 10.15 Catalina.
zsh is now the default shell instead of Bash – Starting with the macOS Catalina beta, your Mac uses zsh as the default login shell and interactive shell. You can make zsh the default in earlier versions of macOS as well. https://support.apple.com/en-us/HT208050
Python 2.7 is deprecated.
Scripting language runtimes such as Python, Ruby, and Perl are included in macOS for compatibility with legacy software. Future versions of macOS won’t include scripting
language runtimes by default, and might require you to install additional packages. If your software depends on scripting languages, it’s recommended that you bundle the runtime within the app.
Use of Python 2.7 isn’t recommended as this version is included in macOS for compatibility with legacy software. Future versions of macOS won’t include Python 2.7. Instead, it’s recommended that you run python3 from within Terminal.
32 Bit applications are now deprecated
If you still have older software that is 32bit they will NOT load.
Profile installation using the profiles command-line tool will be deprecated in future releases of macOS.
New Activation Lock Option for T2 Macs. – All Mac models with the Apple T2 Security Chip now support Activation Lock — just like your iPhone or iPad. So if your Mac is ever misplaced or lost, the only person who can erase and reactivate it is you. More info: forums.developer.apple.com/message/363374
New Read-Only Filesystem Partition. User data is stored on the 2nd partition “Macintosh HD — Data”. MacOS Catalina runs in a dedicated, read-only system volume — which means it is completely separate from all other data, and nothing can overwrite your critical operating system files.
NOTE: Beta 1 – The Macintosh HD Read Only Partition is writeable
If you want to enable read only you have to place a file in the root of the drive.
sudo touch /.rootro
Then reboot to enable read-only mode.
Verify by trying to create /.rootro2
sudo touch /.rootro2
You should get touch /.rootro2: Read-Only file system
NOTE #2: Beta 2 – The Macintosh HD Read Only Partition is now protected by default
When checking on beta 2 you should get touch /.rootro2: Read-Only file system from running sudo touch /.rootro
TCC now covers the users Desktop & Documents Folder, cloud and external drives. – macOS Catalina checks with you before allowing an app to access your data in your Documents, Desktop, and Downloads folders; iCloud Drive; the folders of third-party cloud storage providers; removable media; and external volumes. In addition, you’re asked before an app can perform key logging or capture a still or video recording of your screen.
User Space System Extensions and SDriverKit. – Previously many hardware peripherals and sophisticated features needed to run their code directly within macOS using kernel extensions, or kexts. Now these programs run separately from the operating system, just like any other app, so they can’t affect macOS if something goes wrong.
Marzipan is now Project Catalyst – Allowing iOS apps to be ported over to macOS using Xcode.
lpadmin: Printer drivers are deprecated and will stop working in a future version of CUPS. CUPS printer drivers and backends are deprecated and will no longer be supported in a future feature release of CUPS. Printers that do not support IPP can be supported using applications such as ippeveprinter.
Enterprise Connect is transforming from an app into a new Apple first-party Single Sign-On macOS extension. This new extension delivers improved Kerberos support on macOS. Developers can now build SSO extensions that integrate with websites or native apps and support identity providers like Microsoft Azure AD, Okta and Ping. 10.14 and under will still support the old application for 1 year.
SecureToken BootStrap or Active Directory BootStrap Tokens will be a new way for Active Directory Accounts to get a SecureToken. This will need to be applied from a UAMDM via profile. This new feature will be for the 2nd 3rd or 4th Active Directory SecureToken User only, NOT the first user to log into the system.
4. Security Changes
Notarization is now enforced for all packages, applications and installers built or after June 1st 2019EDIT: See Update Below.
This includes Kexts, but enforcement was already put into place on macOS Mojave 10.14.5.
Gatekeeper Improvements – Gatekeeper will ensure that all new apps you install — from the App Store or the internet — have been checked for known security issues by Apple before you run them the first time and periodically thereafter. This extends the protection from the app’s source to include automated checks for what’s in the app.
UPDATE: 10/03/19 – Apple has changed this and Kexts will NOT require a reboot! – Kernel Extensions (Kexts) now require a reboot to load – Installing third party kernel extensions now requires that you restart your Mac before they’re permitted to load.
Requirements for trusted certificates in macOS 10.15 – Learn about new security requirements for TLS server certificates in iOS 13 and macOS 10.15. support.apple.com/en-us/HT210176
FileVault & fdesetup changes – FileVault FV2 now requires User-Approved MDM Enrollment or UAMDM. You also can’t pass username/password authentication to fdesetup enable. These changes may break existing scripts, workflows or MDM agents. Be sure to check man fdesetup in 10.15 beta to read more about the new Authorization policy. You will need to follow at least one path to use fdesetup to enable FileVault Encryption.
Advances in macOS Security– We are on a journey to continuously improve macOS security, with a particular focus on preventing malware and protecting user data. developer.apple.com/videos/play/wwdc2019/701/
Network Extensions for the Modern Mac – Learn about powerful new APIs in macOS that you can use to create apps that extend and customize the networking capabilities of macOS without using kernel extensions. developer.apple.com/videos/play/wwdc2019/714
What’s New in Apple File Systems – Learn about what’s new in file system technology, including changes to file system layout and imaging technologies. developer.apple.com/videos/play/wwdc2019/710/
What’s New in Managing Apple Devices – Learn about the latest management enhancements for iOS, macOS, and tvOS and the evolution of management tools over the past year. developer.apple.com/videos/play/wwdc2019/303
App Distribution – From Ad-hoc to Enterprise – Whether you want to share your app with a few colleagues, deliver it to employees within an organization, or release it to the world, there’s a distribution mechanism designed to fit your needs. developer.apple.com/videos/play/wwdc2019/304
Advances in Networking – Part 1 – Keep up with new and evolving networking protocols and standards by leveraging the modern networking frameworks on all Apple platforms and following best practices for efficiency and performance. developer.apple.com/videos/play/wwdc2019/712/
Advances in Networking – Part 2 – Take your networking apps to the next level with advances in Bonjour, custom message framing handlers, and the latest in security. developer.apple.com/videos/play/wwdc2019/713/
Introducing Sign In with Apple – Sign In with Apple is the fast, easy way for people to sign in to apps using the Apple IDs they already have. developer.apple.com/videos/play/wwdc2019/706/
System Extensions and DriverKit – One of the next steps in modernizing and improving the security and reliability of macOS is to provide a better architecture for kernel extensions and drivers. developer.apple.com/videos/play/wwdc2019/702
All About Notarization – Notarization is all about identifying and blocking malicious Mac software prior to distribution, without requiring App Review or the Mac App Store. developer.apple.com/videos/play/wwdc2019/703
7. MacAdmins Blog Links
This list is specifically for MacAdmins. This will be an ongoing list of articles and posts that will help you learn the latest 10.15 changes.
The macOS 10.15 SDK provides support for developing apps for Macs running macOS Catalina 10.15. The SDK comes bundled with Xcode 11 beta available from Beta Software Downloads. For information on the compatibility requirements for Xcode 11, see Xcode 11 Beta Release Notes.
Installing third party kernel extensions now requires that you restart your Mac before they’re permitted to load.
Deprecations
macOS frameworks are now thinned for the x86-64 architecture. Apps that execute i386 code now fail with the EBADARCH error code. The remaining stub frameworks are nonfunctional and exist only for compatibility purposes.
9. macOS Catalina 10.15 Beta 1 Known Issues
Migration Assistant is currently unable to correctly migrate data from a Mac running macOS 10.15 to another Mac running macOS 10.15.
WarningYour Secure Token might be lost if FileVault is enabled on a non-APFS formatted volume while upgrading to macOS 10.15. You might be able to work around this by disabling FileVault before upgrading to macOS 10.15, then reenabling FileVault once the upgrade has completed.
During installation of macOS 10.15 you might be prompted to enter your administrator password multiple times to allow installation to proceed.
macOS 10.15 cannot be installed onto an encrypted volume unless it is already in the APFS format.
During upgrades to macOS 10.15, files and folders stored at the root-level of a volume are moved aside to /Library/SystemMigration/History/Migration-UUID/QuarantineRoot/.
If your Mac currently has macOS 10.10 or earlier installed, you must first upgrade to macOS Mojave 10.14 before upgrading to macOS 10.15.
The Install macOS 10.15 app might quit unexpectedly when run on macOS 10.9.
On Macs with the Apple T2 Security Chip, if you’ve used Startup Security Utility to lower Secure Boot to Medium Security or No Security, you’re currently unable to modify Secure Boot settings after upgrading to macOS 10.15.
Workaround: Set Secure Boot to Full Security before upgrading to macOS 10.15. Alternatively, disabling and reenabling FileVault might resolve the issue.
Some apps might not automatically relaunch after installation or updating and must be manually relaunched.
On Macs with the Apple T2 Security Chip, VoiceOver is currently unavailable while in macOS Recovery.
When using the SecureEnclave API with access control set on keys, users might not be prompted to authenticate. This might cause subsequent operations requiring authentication to fail.
Volume replication shouldn’t be used with Fusion volumes, either as a source or destination.
Do you need to download a full macOS installer? I’ll show you 7 different ways!
How to download macOS Sonoma 14,Ventura 13, Monterey 12, Big Sur 11, Catalina 10.15, Mojave 10.14, High Sierra 10.13, Sierra 10.12, El Capitan 10.11, 10.10 Yosemite 10.10, Mavericks 10.9, Mountain Lion 10.8 & 10.7 Lion
UPDATED 5/16/24
If you are wondering how to download macOS full installers direct from Apple’s servers, you’ve found the right place. If you are a macOS user or just starting in Apple IT, you will find out pretty quickly this can get complicated.
8 Different ways to download macOS Full Installers
Need a full macOS installer to rebuild a Mac or create a USB Installer stick? I will show you 8 different ways to download macOS.
1. App Store = High Sierra Mojave Catalina Big Sur Monterey Ventura Sonoma
2. System Preferences = 10.14, 10.15, 11, 12, 13 & 14 – NEW INFO!
The Mac App Store will be your main way to download macOS. You can download the following versions – 10.13, 10.14, 10.15, 11.7.10, 12, 13 & 14. Each link below will open up that version in the Mac App Store. All you need to do is, click the Download Button. When the download is finished, the installer will be in /Applications.
NOTE: If you are looking for Apple.com direct download links for macOS 10.12 Sierra, 10.11 El Capitan, 10.10 Yosemite, 10.9 Mavericks, 10.8 Mountain Lion & 10.7 Lion skip to section Section 5 & 6
2. macOS Mojave, Catalina, Big Sur & Monterey Software Update pane = Sonoma – WARNING!
Apple added a new system preference pane in 10.14+, it’s called Software Update. This new section will show you available macOS software updates, but it will also show you upgrades! In this case we can use this pane to download and install macOS Ventura.
This is what the new Ventura “Delta upgrade” looks like, notice how small it is, you will NOT get the full installer.app, it will install immediately after download.
WARNING! macOS Sonoma changes the upgrade system. The upgrade is now an “Update” and will not download the full installer app if you are on Monterey 12.3 or newer. If you are on Monterey 12.2.1 or below, you will get the full installer app from System Preferences.
After hitting the “Upgrade Now” button, macOS Ventura will start to download and then it will install on your main system immediately if the size of the update is under 12GB
If you are on Monterey 12.2.1 and below, Big Sur, Catalina or Mojave this is what you will see in Software Update:
You will get the full installer app if you are on Monterey 12.2.1 and below, Big Sur Catalina or Mojave. NOTICE the full 12.5GB size.
3. Download Sonoma, Ventura, Monterey, Big Sur, Catalina, or Mojave with softwareupdate –fetch-full-installer
With the release macOS 11 Big Sur & 10.15 Catalina we got a much needed new option added to the softwareupdate binary. We can now download full installers!
To get more information you can just run the softwareupdate command from terminal.app and it will give you a quick overview of all the options.
softwareupdate --fetch-full-installer – this command will download the newest version of Monterey.
softwareupdate --fetch-full-installer --full-installer-version – This sub option will allow you to download specific versions. An example of this would be 11.6.8. An example of this command is
When the download is complete the macOS Installer app will be in /Applications
4. Download macOS Sonoma, Ventura, Monterey or Big Sur Full installer via Apple SUS & InstallAssistant.pkg
You can download the full installer of macOS Big Sur from Apple’s own software update servers. The InstallAssistant.pkg includes the entire Install macOS Big Sur.app. Run the pkg and it will put the entire install app into your Applications folder!
installinstallmacos.py is a script that was written by Greg Neagle. The description reads – A tool to download the parts for an Install macOS app from Apple's softwareupdate servers and install a functioning Install macOS app onto an empty disk image
This script reaches out directly to Apple and downloads all the pieces that form the macOS install app. At the end it will install to a blank dmg image. In the end you have a fresh macOS Install app in a .dmg!
Opening the link above shows you the raw script. Download it by Right Clicking anywhere on the page and then select Save As. Now that you have the script, let’s run it.
Open up terminal.app. Below is an example how the script would look on your command line.
After running installinstallmacos.py, this is what you should see.
Notice that you have 8 versions of full macOS installers available! As of April 9th 2020, the latest version of Catalina is 10.15.4 (19E287). Select 2 (or 6 it’s doubled up for some reason) then hit enter.
The download will start and look like this
installminstallmacos.py is downloading all the parts of the installer.
All of the download pieces are downloaded to /Users/yourhome/content/downloads
Making empty sparseimage...
installer: Package name is macOS Catalina
installer: Installing at base path /private/tmp/dmg.IJe432
installer: The install was successful.
When the download is complete the .dmg will be located at the root of your home folder.
3. What happens if you have an old version of installer.app on your system and want the latest version?
4. How do I check the macOS version number of Install macOS installer.app?
5. Downloading the latest version after finding an old version.
6. The Mac you are using has to be compatible with the macOS version you are trying to download.
7. If Mojave is not compatible with my system, how do I download High Sierra 10.13?
8. The dreaded 22mb”Stub” installer.
9. The Mac App Store was redesigned for Mojave 10.14!
10. Can I download High Sierra in the new Mojave App Store?
11. The new Mac App Store has solved the dreaded 22mb “Stub” installer problem.
12. Let’s review which macOS versions you can download on Mojave & High Sierra
12. Mac App Store Errors
13. Review of which macOS versions you can download on Mojave & High Sierra depending on your Mac Version.
14. Download full macOS installers using installinstallmacos.py
15. How to download macOS Catalina 10.15 Beta – Apple Beta Software Program.
16. Apple App Store Download links for 10.15, 10.14, 10.13 + direct download links for 10.12, 10.11 & 10.10.
1. Support.Apple.com/Downloads
Let’s say you want to download the full macOS installer.app from Apple so you can deploy in-place upgrades or build a USB Installer. Let’s first check Support.Apple.com/Downloads.
Searching for macOS 10.14 MojaveSearching for macOS 10.13 High Sierra
Hmmm… Searching for Mojave and High Sierra installers only show combo and security updates.
2. High Sierra Mac App Store
No big deal, let’s go to the High Sierra App Store and search for Mojave and High Sierra installers.
I found MojaveHigh Sierra not found 404
Ok, well we are getting a little closer it seems. Searching for macOS Mojave comes up, yet High Sierra is nowhere to be found.
3. What happens if you have an old version of installer.app on your system and want the latest version?
The button under the Mojave Circle says OPEN instead of download ???
You now see Mojave is there in the Mac App Store, but instead of Download it says Open. Let’s find out what that means.
Seems like I already have the installer. Let’s click “Show Application” to find out more info.
After clicking Open I am presented with this message above. As you can see the App Store first searched my system and found that I already have macOS Mojave installer.app. Notice that it searches all locations, not just the Applications folder where the installer app normally is stored. It found the macOS Mojave Installer.app in a folder called test.
App Store found the installer!
Great, we are ready to go right? Not really because I have no clue what version this is. Looking at the creation date gives us a pretty good clue. MacOS Mojave was released on September 24th 2018. This Mojave installer download was created 23 days after release so it’s most likely 10.14.0.
4. How do I check the macOS version number of Install macOS installer.app?
We have multiple ways of checking the version number and build number. The easiest way is to simply look at the version number info from Get Info.
ah.. 14.0.22 = 10.14.0!
After checking the version number, I now know the macOS version is 10.14.0. We can find the build number inside the actual installer.app but knowing the version number is usually good enough unless you need a specific hardware build.
5. Downloading the latest version after finding an old version.
I have macOS Mojave Installer.app on my system but it’s outdated. I need the latest version. We now need to get the app store to show the Download button instead of Open. Simply close the App Store, delete the old version of macOS Installer then re-open.
NOT THIS AGAIN!
I deleted the installer.app but the App Store still thinks that I have the installer. The button SHOULD switch to Download but didn’t. If this happens again just restart your Mac.
Great! Lets start the download.
Perfect, after restarting the Mac App Store can’t find any version of the Mojave installer on your Mac so it now shows you the download button.
6. The Mac you are using has to be compatible with the macOS version you are trying to download.
The Mac App Store will not let you download a version of macOS that is not compatible.
We could not complete your purchase. This version of macOS 10.14 cannot be installed on this computer.
I STILL can’t download Mojave because the Mac I’m trying to download it on is not compatible. All I want to do is download macOS Mojave! I do understand why Apple did this, they don’t want a user to think they could install Mojave on a system that can’t run it. Apple should take this one step further and not show it as available in the App Store. Or have the button say Not Supported.
7. If Mojave is not compatible with my system, how do I download High Sierra 10.13?
How do I download macOS High Serra 10.13? If searching High Sierra in the App Store comes up empty how can I download it? You have to visit the Apple Upgrading to High Sierra Support Page for the direct App Store link.
Why in the heck are you trying to install High Sierra when you can install MOJAVE?!?!? If you REALLY want to install High Sierra FINE…. we will give you the link.
We are back in the 10.13 App Store, let’s try to download again.
MacOS High Sierra 10.13 Mac App Store.
After clicking Download we finally get some action!
Wait a minute, that downloaded way too fast….
I have a pretty fast connection but not 5.3 gigabytes in 3 minutes fast. The download just finished let’s see what the deal is.
The dreaded macOS 22mb “Stub” installer
8. The dreaded 22mb”Stub” installer.
This is what’s known as the macOS “Stub” Installer. This is not the 5gb full installer we are looking for it’s only 22mb! All this file will do is start the installation only to download the full 5gb before beginning the install. You cant boot to this file or create a USB Installer from this pkg.
While the 10.13 App Store does not allow you to download the full High Sierra installer, it will allow you to download the full version of Mojave.
9. The Mac App Store was redesigned for Mojave 10.14!
The App Store was totally redesigned for 10.14 Mojave. The look is pretty different from 10.13’s App Store. This is what the Mojave section looks like in the new App Store.
4.5 stars nice!!!
The new design aligns the Mac App Store with the iOS App Store. The first hint is that the Download button is now GET.
The GET button starts the process.Sure you want to download a 6gb file?Need Admin creds to start the downloadProfit
We are off to the races now! The first thing you will notice is that instead of downloading macOS Mojave Installer inside the App Store it opens Software Update. Software Update will search for the Installer and ask if you are sure you want to download the 6gb Mojave Installer. After clicking download you will get a new prompt for admin credentials to start the download (not to actually install yet). After the download completes you will finally have the latest macOS installer.app.
10. Can I download High Sierra in the new Mojave App Store?
Good news, the Full High Sierra installer will now download from the new App Store.
Finally High Sierra!
11. The new Mac App Store has solved the dreaded 22mb “Stub” installer problem.
The “Stub” download problem can be reproduced using 10.13 App Store. Yet I can’t seem to reproduce this on 10.14. I have tried multiple machines. The “Stub” installer problem seems to be gone as long as you are using 10.14’s App Store.
12. Mac App Store Errors
If you get one of the following errors, follow look at the next section below.
The requested version of macOS is not available
This version cannot be installed on this computer
13. Review of which macOS versions you can download on Mojave & High Sierra depending on your Mac Version.
After all this testing, we know what can be download from the App Store. We also found out what can’t download. After performing multiple tests with each OS you can download any newer version, the current version but only 1 OS behind. You will get a mixture of “The requested version of macOS is not available” or “This version cannot be installed on this computer”
T2 Security Chip equipped Macs
The following Macs have a T2 Security Chip.
1. 2017 iMac Pro
2. 2019 Mac Pro
3. 2018 Mac Mini
4. 2018-2010 MacBook Air
5. 2019 16″ MacBook Pro
6. 2018-2019 15″ MacBook Pro with TouchBar
7. 2018-2019 13″ MacBook Pro with TouchBar
10.14.4 and up (non T2 Macs) Mac App Store
Can download 10.14 & 10.13
(Note: on 10.14.0 – 10.14.3 High Sierra 10.13 shows as “not available” further confusing people)
Can’t download 10.12 or 10.11
10.14.x (T2 Macs) Mac App Store
Can download 10.14
Can’t Download 10.13
10.13.6 Mac App Store
Can download 10.14, 10.13 & 10.12
Can’t download 10.11
14. Download full macOS installers using installinstallmacos.py
I showed you how to download the macOS installer through the Mojave Mac App store. The thing is, a better way to download the full installer exists and is called installinstallmacos.py. I was going to explain how to use installinstallmacos.py here but now realize the topic deserves a full article. I did not even get into hardware specific (Forked) builds. As you can see we have a lot to go over, so stay tuned. I will put the link here when complete.
15. How to download macOS Catalina 10.15 Beta – Apple Beta Software Program.
macOS Catalina 10.15 Beta Software Program signup
If you would like to test Apple’s Public Betas you can sign up using this link. You can then download and try macOS Catalina 10.15 Beta.
