Hopefully QEMU, Parallels & VMware are not far behind.
I will walk you through the entire process. (UPDATE!KhaosT just released an updated GUI interface, more info at the bottom of the article)
https://www.youtube.com/watch?v=XxkzuFejjj0
My video walking you through the process of setting up a virtual machine that can run macOS Monterey!
Requirements & Instructions (Modified Original Instructions)
Download links are at the bottom.
Apple Silicon M1 Mac (running macOS Monterey)
Xcode 13 (Beta)
Apple Configurator 2
macOS Monterey IPSW
Empty dmg image (This will be your system storage, name it disk.dmg, you can create it from Disk Utility)
First Time Setup
1. Clone this project from Github save as zip for use in Xcode. Open zip in Xcode Beta.
2. Click the Run Button (VM will build)
3. Quit the app when “Virtual Machine” window showed up, move disk.dmg into the app’s container
4. Run it again
5. Open Apple Configurator 2, if everything works, There should have a VirtualMac in DFU mode
6. Temporary disable macOS Firewall and iCloud Private Relay (Apple Configurator 2 can’t restore VM with those features enabled) Both are default off if you did not turn them on or sign in with your AppleID
7. Drag macOS 12 IPSW file into Apple Configurator 2, click Restore to install macOS
8. When AC2 finishes the install you should be done and your vm should boot to macOS 12 Setup Assistant!
UPDATE!
KhaosT just released a new update to his code that gives us control over the VM Settings.
You can now downgrade T2 BridgeOS with an IPSW file and Apple Configurator 2 (for up to one week after the release of a new macOS update)
You can now downgrade BridgeOS on your T2 Intel Mac (2017-2020) to a previous version with Apple Configurator 2!
Ever since Apple released the very first T2 equipped Mac, some users wished that they had a way to downgrade to the previous version of BridgeOS.
The problem?
Updating BridgeOS on a T2 Mac was a one way street. You could only upgrade not downgrade.
Why would anyone want to downgrade BridgeOS?
Downgrading BridgeOS for troubleshooting & macOS Update workflow testing.
Let’s go over a quick example of why you might want to downgrade BridgeOS. You updated to macOS Big Sur 11.4 from 11.3. After the update, you’ve found that something is not working right. The T2 chip handles many things including, fan speed, battery, power, charging & sound (speakers & microphone). So in this example, maybe you are getting audio cracking noise (has happened in the past). Now you thinking that the new version of bridgeOS might be causing problems on your T2 Mac.
The 2nd example is macOS Update testing. If you are a system administrator in charge of updating a large fleet of Mac testing is very important. Part of that macOS Update process is updating BridgeOS. An example of this is if you upgrade a T2 Mac from 11.3 to 11.4. BridgeOS is updated in the process. Now that this T2 Mac is on the latest version of BridgeOS it normally can not be downgraded. Even if you boot back to recovery and install 11.3, BridgeOS will remain the same updated version. Set this Mac on the shelf because you will never be able to take it through a full update process again until 11.5. Now you want to downgrade to a previous version of BridgeOS so you can single out an issue or test the full update process again.
Apple Configurator took care of all the work in both above examples, downloading the prod/final version of BridgeOS for your hardware.
This is different.
We can now download full BridgeOS IPSW Files directly from Apple the same way we do now with Apple Silicon M1 Macs. We can then use the BridgeOS IPSW File to restore/revive BridgeOS to your T2 Mac. The difference here is that Apple WILL stop signing for previous versions of BridgeOS. The signing process follows iOS and is canceled usually about one week after the release of a new update. Apple leaves ONE previous version signed (for 7 days) so you can now downgrade to that version!
BridgeOS and macOS Version Caveats
The first thing to know about BridgeOS is that it has macOS version requirements. BridgeOS supports the macOS version that’s released alongside it. The BridgeOS version also supports previous versions macOS. Let’s go over an example.
After updating to Big Sur version 11.4, you are now are having issues with your speakers (sound processed through T2 chip). You want to downgrade to the 11.3 compatible version of BridgeOS to see if that fixes the issue. You can now downgrade! The only problem is, the 11.3 version of BridgeOS does NOT support newer versions of macOS. You will need to downgrade to the minimum version of macOS that is supported by the version of BridgeOS that you are trying to downgrade to. You now need to downgrade macOS to version 11.3 to support the previous version of BridgeOS. If you don’t downgrade macOS to a compatible version and attempted to boot your Mac, you would be immediately prompted to update BridgeOS. The Mac would boot into “macOS Update Assistant” and would then download the latest compatible BridgeOS update and install it for you.
After downgrading BridgeOS you will need to reinstall/downgrade 11.3 over the top of 11.4 or erase and install 11.3 again. You will now be running 11.3 and the matching bridgeOS version 18P4556.
BridgeOS Version Compatibility Continued
I built a table to help visualize the current situation.
This table shows how BridgeOS version 18P4556 is compatible with macOS version 11.0.1 – 11.3.1. A forced BridgeOS update will be triggered if macOS 11.4 or newer is installed.
NOTE: Point/dot releases (example 11.3.1) may or may not come with an associated BridgeOS update. Big Sur 11.3.1 is compatible with the 11.3 version of BridgeOS
T2 Mac BridgeOS IPSW
MacOS
Signed
Version
Date
5.4_18P4663_Restore.ipsw
11.4
YES
18.16.14663
5/24
5.3_18P4556_Restore.ipsw
11.3
NO
18.16.14556
4/26
5.2_18P4347_Restore.ipsw
11.2.2
NO
18.16.14347
2/25
5.2_18P4346_Restore.ipsw
11.2
NO
18.16.14346
2/01
5.1_18P3030_Restore.ipsw
11.1
NO
18.16.13030
12/14
5.0.1_18P2561_Restore.ipsw
11.0.1
NO
18.16.12561
11/12
The table above lists the IPSW file version and build number. The next section is the maximum minor release that is compatible.
The BridgeOS Version in the 4th section matches what is listed in System Profiler (System Firmware Version), followed by the release date and size.
You can only downgrade back one previous version. Apple usually supports T-1, current minus one version. Normally when a new version of BridgeOS is released the the previous version of BridgeOS is unsigned after 7 days and cannot be installed.
My T2 Intel Mac BridgeOS Download Database –> LINK
1. Download the version of BridgeOS IPSW file that you want to install
2. Boot the target T2 Mac into DFU Mode
3. Connect both Macs with USB-C white Apple charge cable.
4. Open Apple Configurator 2
5. Drag BridgeOS IPSW File over to DFU icon.
6. You will be prompted to Restore or Revive
7. Restore = Click Restore (erases all data)- downgrade BridgeOS (you can then reinstall macOS from Recovery
8. Revive = Click Revive (etains all data) – downgrades BridgeOS (you will need to install previous compatible version of macOS over the top of the current version)
9. Done! You are now on a previous version of BridgeOS.
This is what it looks like to drag a BridgeOS IPSW file over the DFU icon in Apple Configurator 2.
Dragging BridgeOS IPSW file over to Apple Configurator 2
The Restore/Revive menu after dragging the BridgeOS IPSW file over to Apple Configurator 2.
Restore or Revive menu for BridgeOS
This is what happens when you attempt to restore/revive with an unsigned version of BridgeOS.
The System cannot be restored on this device. The system install could not be authorized for this device. The build may not be approved for production installs.
This is the message that you get when you attempt to install an unsigned version of BridgeOS.
How to remove the firmware password on 2011-2020 Macs + New way for 2018-2020 T2 Macs!
You can now remove the firmware password (+ erase all data) on a T2 Mac without Apple Support if you forgot it.
In this article, I will go over the history of the firmware password on Intel Mac computers. After that, I will show you a new way how to remove the firmware password (and erase your data) on a T2 Mac from 2018-2020. (Scroll to section 6).
NOTE: This information is only for 2006-2020 Intel Mac computers. Apple Silicon M1 Mac Devices do not have a firmware password.
I will also go over my recommendations on how you can protect your data at the end of this article.
I will answer the following questions.
What does setting a firmware password on a Mac do?
What are the differences in firmware passwords from the following years – 2006-2010, 2011-2017 & 2018-2020?
How to you set the firmware password in recovery.
How to Enable & Disable Firmware Password in macOS.
What can you do if you forget the firmware password?
How to remove the firmware password with Apple Support.
Removing the firmware password on a T2 Mac with Apple Configurator 2.
How long was this new way possible? Does anyone at AppleCare know about this?
What does this mean for education, small & large companies, home users, computer recyclers, and criminals?
How to Reinstall macOS on your Apple Silicon Mac. – Everything you need to know!!
Apple Silicon M1 Mac Recovery has changed! The interface, options and the way you reinstall macOS is all new. I will show you everything you need to know.
UPDATED 09/25/21
Apple Silicon Macs started to arrive in customers hands on Tuesday November 17th, 2020. One of the first things we need to understand is how to reinstall or factory erase macOS on Apple Silicon. All the old rules that you had to follow with Intel Macs has now changed. I will show you 3 different ways to reinstall macOS Big Sur on a Apple Silicon Mac.
If you are looking for more information on Apple Silicon Macs, I’ve wrote an article going over everything you need to know.
Right off the bat, we need to understand that Mac Internet Recovery on Apple Silicon is DEAD! Finally you don’t have to worry about IR errors and the problems that come with them.
Internet Recovery will still remain for Intel based Macs. For Apple Silicon we now have 4 different ways to reinstall macOS.
1. macOS Recovery = First line of recovery.
2. System Recovery = Hidden partition for when normal macOS recovery is not available.
3. macOS Big Sur USB Installer Drive. = Boot to a createinstallmedia based Big Sur full installer.
4. macOS System Restore via DFU mode + Apple Configurator 2.
Reinstall macOS on Apple Silicon Table of Contents
1. macOS Recovery
2. macOS System Recovery
3. Both macOS Recovery and System Recovery are not available?
4. macOS Big Sur USB Install Drive
5. How to Use Apple Configurator 2 to reinstall macOS on Apple Silicon
6. Apple Silicon Security Policy
7. Apple Silicon Compatible Versions of macOS
8. Can I downgrade macOS on Apple Silicon?
9. Where can I get macOS ISPW Firmware files?
10. Signed? What does that mean?
1. Apple Silicon macOS Recovery
Apple Silicon macOS Recovery is almost exactly the same as it is on Intel Based Macs. One of the major things that has changed is the way that you get into macOS Recovery. Instead of having to remember a bunch of keyboard commands you can now use the power button to get right to the boot picker macOS recovery menu!
Mr. Macintosh video on how to get to the macOS recovery menu on Apple Silicon Macs
Mr. Macintosh How to – Boot to recovery + Erase & Reinstall macOS on your Apple Silicon M1 MacBook Pro & MacBook Air!
https://youtu.be/lBiUSnrYyFM
Mr. Macintosh How to Video – Boot to Recovery + Erase & Reinstall macOS on Apple Silicon Mac Mini M1. I will also show you how to boot from a Big Sur USB installer to reinstall macOS twice as fast!
The video above shows you how to factory restore / erase your Apple Silicon Mac and reinstall macOS.
First line of defense, is macOS Recovery.
2. Apple Silicon System Recovery
Apple Silicon System Recovery is a new hidden recovery option in addition to macOS Recovery. If for some reason macOS Recovery becomes corrupt, System recovery will load which is the same as macOS recovery. You can use it to reinstall macOS and macOS Recovery.
3. Both macOS Recovery and System Recovery are not available?
If something serious goes wrong with your Mac and it can’t boot into macOS you will see a new startup screen. (The blinking folder icon has been retired). You will now see a screen like this
Apple Silicon Startup problems – Prohibited sign – Credit Martin Nobel – https://twitter.com/martinnobel_/status/1321645315502432256
This screen has a new Apple Support URL support.apple.com/mac/restore which will tell you that you need to restore macOS firmware via Apple Configurator 2 and a 2nd mac running 10.15.6 or newer. Restoration will now work the same on the Mac as it does on iOS iPhones and iPads.
4. Apple Silicon External Boot Options – USB Installer
On Apple Silicon external boot remains, but has changed.
External Boot for the macOS installer is now enabled by default
You no longer need to enter Security Options to enable External Boot!
Now you can build out an USB Installer of macOS Big Sur and boot your Apple Silicon Mac to it.
https://youtu.be/dQCp-rQlZuY
Mr. Macintosh Video on how to create a macOS Big Sur USB Install Disk for Apple Silicon or Intel.
https://youtu.be/2iNDe2zAJyg
Mr. Macintosh Video on how to use a USB Installer to reinstall macOS on Apple Silicon!You can now boot a USB macOS installer without enabling external boot in Security options! It’s enabled by default.
5. How to Use Apple Configurator 2 to reinstall macOS on Apple Silicon
If all options to reinstall macOS fail you can now use Apple Configurator 2.
1. Revive = Will restore macOS Recovery Only. (User data remains)
2. Restore = Will will download macOS and macOS recovery and reinstall them (THIS WILL ALSO ERASE YOUR HARD DRIVE)
This will help with rapid deployment in lab / school situations.
My Mac T2 BridgeOS Restore article will show you this process. It has not changed except for one thing. In the future the “RESTORE” option will automatically download the newest macOS ISPW file for you and install it. For now you will need to download it and and drag it over to the DFU icon.
Mr. Macintosh quick overview video on how to boot your Apple Silicon Mac to DFU mode. I will also show you how to reinstall macOS in 10 minutes with Apple Configurator 2 and a 2nd Mac.
How to reinstall macOS on a M1 Mac Mini UPDATED VIDEO!
Mr. Macintosh Deep Dive video that goes over the entire process and explains how the enter DFU and Apple Configurator 2 works + Troubleshooting!
How to install macOS on multiple Apple Silicon M1 Macs in about 10 minutes!
I’ve also written an article that goes over the entire new DFU + Apple Configurator 2 Apple Silicon Restore process below.
1.Full Security = “iOS Security” – Only the latest signed version of macOS can be installed on an Apple Silicon Mac.
Full Security
Ensures that only your current OS, or signed operating system software currently trusted by Apple, can run. This mode requires a network connection at software installation time.
WWDC 2020
2. Reduced Security = Any version of macOS that was signed by Apple.
Reduced Security
Allows any version of signed operating system software ever trusted by Apple to run.
WWDC 2020
With the new Apple Silicon Security Policy, you can set a security policy for each container! On an Intel based Mac the security policy would be set on the entire system.
New Apple Silicon Security Policy can be set differently on each container.
7. Apple Silicon Compatible Versions of macOS
Will you be able to install older versions of macOS? A quick review;
Full Security = iOS based security, only the latest signed version of macOS can run on the system.
Reduced Security = Any version of macOS that was signed by Apple can run on Apple Silicon
Note: The shipping OS version will be the oldest OS available to install
8. Can I downgrade macOS on Apple Silicon?
Yes!
Note. The “Shipping version” of macOS on Apple Silicon is the lowest OS that can be installed. An example of this is the M1 iMac which came with 11.3. You can not install Big Sur 11.2 on it.
9. Where can I get macOS ISPW Firmware files?
I started a new database page that will keep track of all macOS Apple Silicone IPSW Firmware files.
Starting with Apple Silicon, macOS OTA (Over The Air) Firmware will be signed by Apple. This means that they control which version of macOS can be installed on your Mac. The difference this time around is that Apple gives us the option to turn Signed Checking OFF. So you will still be able to install older versions of macOS.
Apple Silicon macOS Big Sur IPSW Firmware Restore File Database
How to download Apple Silicon M1 macOS IPSW Restore Files. You can use them with Apple Configurator 2 and a 2nd Mac for quick restores.
UPDATED: 11/19/24
With the introduction of the new Apple Silicon M1 Mac, you can now reinstall macOS with Apple Configurator 2 and IPSW files just like iOS! This page is a database of all macOS IPSW Files. The macOS ISPW firmware files database will be updated when new updates are released.
Table of Contents
1.macOS Sequoia Final IPSW Firmware files
2. macOS Sonoma Final IPSW Firmware files
3. macOS Ventura Final IPSW Firmware files
4. macOS Monterey Final IPSW Firmware Files
5. macOS Big Sur Final IPSW Firmware Files
6. macOS Sequoia Beta IPSW Firmware files
7. macOS Sonoma Beta IPSW Firmware files
8. macOS Ventura Beta IPSW Firmware Files
9. macOS Monterey Beta IPSW Firmware Files
10. macOS Big Sur Beta IPSW Firmware Files
All download links are directly from Apple’s SUS Server.
For more information on how to reinstall macOS on your Apple Silicon Mac, I’ve written an article that goes over everything you need to know!
Mac Transition to Apple Silicon – Everything you Need to Know!
Apple Silicon Macs will be here soon!
Apple said the first Apple Silicon Mac will launch before the end of 2020. The launch date is quickly approaching, now is the time to get up to speed! I will be following my “Everything you need to know” format from my previous articles.
This article will be updated as new Apple Siliconinformation comes in.
The feedback that I’ve received from these has been really great. The big takeaway is that everyone really likes how all the information is all in one place. You are not wasting time looking for that one article, command or link.
NOTE: Everything in this article is public knowledge from Apple. Once the first Apple Silicon Mac ships, I will post more in depth articles.
Apple Silicon changes the way in which we enter recovery on the Mac. In the past, we had to remember multiple keyboard commands. On Apple Silicon, all you need to do is hold down the power button. In a few seconds, you will see the new Apple Silicon Startup Manager.
7. How to use the new start manager on Apple Silicon
To enter Apple Silicon Startup manager follow these steps.
1. Hold down the power button
2. You will see the message “Continue holding for startup options”
3. The next message will say “Loading Startup Options…”
4. You will now see the new Apple Silicon Startup Manager.
Apple Silicon Mac Startup Manager Options
The startup manager will show you the main boot disk (Macintosh HD) Boot icon and Recovery Options. Click “Options” to boot into macOS Recovery.
8. Internet Recovery is dead on Apple Silicon
Have you had trouble booting into Internet Recovery in the past? You are not alone. Now with Apple Silicon, Internet recovery is officially retired. It will still remain for Intel based Macs. For Apple Silicon we now have 3 different ways to reinstall macOS.
1. macOS Recovery = First line of recovery.
2. System Recovery = Hidden partition for when normal macOS recovery is not available.
3. macOS System Restore via DFU mode + Apple Configurator 2.
9. Apple Silicon macOS Recovery
Apple Silicon macOS Recovery is almost exactly the same as it is on Intel Based Macs. The only difference is Security Policy options was moved from the Menu bar to the “Startup Disk”.
First line of defense, is macOS Recovery.
10. Apple Silicon System Recovery
Apple Silicon System Recovery is a new hidden recovery option in addition to macOS Recovery. If for some reason macOS Recovery becomes corrupt, System recovery will load which is the same as macOS recovery. You can use it to reinstall macOS and macOS Recovery.
System Recovery is a hidden non deletable container. It’s a new way to reinstall macOS when recovery is not available.
11. Both macOS Recovery and System Recovery are not available?
The blinking folder icon is now retired. If the Mac is not bootable, you will now see an old friend.
The sad Mac returns when Macintosh HD, Recovery and System recovery are not available.
12. Apple Silicon External Boot Options – USB Installer
On Apple Silicon external boot remains, but has changed.
External Boot for the macOS installer is now enabled by default
You no longer need to enter Security Options to enable External Boot!
You can build out a USB Installer of macOS Big Sur and boot your Apple Silicon Mac to it. The big difference that ONLY the installer is available for a reinstall of the OS. You can NOT erase the drive in this mode.
You can now boot a USB macOS installer without enabling external boot in Security options! It’s enabled by default.
13. How to Use Apple Configurator 2 to reinstall macOS on Apple Silicon
If all options to reinstall macOS fail you can now use Apple Configurator 2.
This will help with rapid deployment in lab / school situations.
14. Apple Silicon Security Policy
We know that an Apple Silicon Mac will have 2 Security modes.
Apple Silicon Security Policy menu
1.Full Security = “iOS Security” – Only the latest signed version of macOS can be installed on an Apple Silicon Mac.
Full Security
Ensures that only your current OS, or signed operating system software currently trusted by Apple, can run. This mode requires a network connection at software installation time.
WWDC 2020
2. Reduced Security = Any version of macOS that was signed by Apple.
Reduced Security
Allows any version of signed operating system software ever trusted by Apple to run.
WWDC 2020
With the new Apple Silicon Security Policy, you can set a security policy for each container! On an Intel based Mac the security policy would be set on the entire system.
New Apple Silicon Security Policy can be set differently on each container.
15. Apple Silicon Compatible Versions of macOS
Will you be able to install older versions of macOS? A quick review;
Full Security = iOS based security, only the latest signed version of macOS can run on the system.
Reduced Security = Any version of macOS that was signed by Apple can run on Apple Silicon
Note: The shipping OS version will be the oldest OS available to install.
16. Can I downgrade macOS on Apple Silicon?
Yes! But only with your Apple Silicon Security Policy set to “Reduced Security”.
17. How to use SMB Mac Sharing Mode (Replaces Target Disk Mode – TDM)
Target Disk Mode has been retired on Apple Silicon. It was replaced with Apple Silicon Mac Sharing Mode.
Boot to macOS recovery and then select “Mac Sharing Mode” you will be able to transfer data over USB-C cable. You will need to authenticate with a SecureToken User that is on the host Mac.
Mac Sharing MOde replaces Target Disk Mode.
18. Apple Mac Mini Developer Transition Kit (DTK)
New Mac Developer Transition Kit with Apple Silicon, a comprehensive set of resources, and one-on-one technical support, you’ll have everything you need to get your Universal apps ready before Apple Silicon Macs become available to customers.– developer.apple.com/programs/universal/
Universal App Quick Start Program – Get your Universal apps ready. The Universal App Quick Start Program includes all the tools, resources, and support you need to build, test, and optimize your next-generation Universal apps for macOS Big Sur. – developer.apple.com/programs/universal/apply/
5. What’s New for Enterprise and Education WWDC 2020 June 2020 (v1.0) (AppleSeed Account Required)– appleseed.apple.com
6. AppleSeed – macOS 11.0 Big Sur Beta Release Notes(AppleSeed Account Required) – appleseed.apple.com
23. WWDC20 Video Links
Port your Mac app to Apple Silicon – Your porting questions, answered: Learn how to recompile your macOS app for Apple Silicon Macs and build universal apps that launch faster, have better performance, and support the future of the platform. We’ll show you how Xcode makes it simple to build a universal macOS binary.developer.apple.com/videos/play/wwdc2020/10214/
What’s new in managing Apple devices. – iOS, macOS, tvOS We’ve made significant strides in bringing crucial device management features to macOS. Discover how these features can help you manage your all your devices using the same tools and technologies. Get details on changes coming this year and how they will impact your deployment workflows– developer.apple.com/videos/play/wwdc2020/10639/
iPad and iPhone apps on Apple Silicon Macs. – Apple Silicon Macs can run many iPad and iPhone apps as-is, and these apps will be made available to users on the Mac through the Mac App Store. Discover how iPad and iPhone apps run on Apple Silicon Macs, and the factors that make your apps come across better.– developer.apple.com/videos/play/wwdc2020/10114/
Explore the new system architecture of Apple Silicon Macs – Discover how Macs with Apple Silicon will deliver modern advantages using Apple’s System-on-Chip (SoC) architecture. Leveraging a unified memory architecture for CPU and GPU tasks, Mac apps will see amazing performance benefits. developer.apple.com/videos/play/wwdc2020/10686/
24. MacAdmin Blog Links
This list is specifically for MacAdmins. This will be an ongoing list of articles and posts that will help you learn the latest 11.0 changes.
