If you installed the Big Sur 11.6.1 Update, Recovery OS will be upgraded Monterey on your M1 Mac.
Normally when you install a macOS update, recovery gets updated so it matches the OS version.
Example: You have an M1 Mac that has Big Sur 11.5.2 on it. Then you installed the 11.6 update. The following happens.
M1 Mac
MacOS is updated to 11.6
Recovery OS is updated to 11.6
Fallback Recovery stays on 11.5.2
Intel Mac
MacOS is updated to 11.6
Recovery OS is updated to 11.6
Big Sur OS and Monterey Recovery on M1?
MacAdmin @nstrauss first reported something strange last week.
https://support.apple.com/en-us/HT204904 Command + R vs Option + Command R. The OS that shipped with your Mac vs the latest available supported version. What’s the equivalent to this on Apple silicon? If I’m not ready to move to Monterey, but recovery is only offering Monterey, what can I do?
How could you have an M1 Mac with Big Sur installed but Monterey as the recovery OS?
There is one way you can get into this situation.
Upgrade an M1 Mac to Monterey
Boot to recovery with Big Sur USB Installer
Erase the drive
Install Big Sur
You now have an M1 Mac with Big Sur OS and Monterey Recovery.
The only way to fix this is to use Apple Configurator 2 + DFU mode. You can restore macOS and Recovery back to Big Sur with the 11.6 IPSW.
This was not what happened in Nathaniel’s situation.
The Big Sur 11.6.1 update changed the normal process.
EDIT: This happens with ANY Big Sur update!
Example: You have a Software Update deferral in place. You are offered the 11.5.2 or 11.6 update, you will also get Monterey Recovery.
I started talking with someone who knows the recovery system very well. He was just as confused as I was.
I decided to test on my M1 that was on 11.6. I Booted into recovery, and recovery OS was on 11.6. Then I booted into fallback recovery and it was on 11.6.
The version was 11.6 because I used AC2 and the 11.6 IPSW to restore.
I then installed the 11.6.1 update in System Preferences > Software Update.
When the update was complete, the OS was on 11.6.1. I then booted into recovery and found this.
Recovery is on macOS Monterey 12.0.1 …. ok
Let’s try Fallback Recovery. If you are not familiar with FBR this is what Apple says about it.
Fallback Recovery = From a shutdown state, double- press and hold the power button. The same process as recoveryOS boot, except that it boots to a second copy of recoveryOS that is kept for resiliency. However, LLB doesn’t lock an indication into the Boot Progress Register saying it is going into recoveryOS, and therefore the fallback recovery OS doesn’t have the capability to change the system security state.
Apple Platform Security
The idea here is FBR is a 2nd copy of recoveryOS that is one version behind. This a great troubleshooting tool that you could use if you installed an update but something went wrong.
So I booted into FBR and it was on 12.0.1 Monterey.
How can you confirm that you are booted to FBR? From the Apple Security Guide, you should not be able to modify system security.
Once in Fallback recovery, I attempted to modify the Startup Security Utility and got the message above.
Howard Oakley wrote an excellent article on Fallback Recovery if you would like to learn more.
We now know that installing the 11.6.1 update will update recoveryOS to Monterey. What about the Big Sur 11.6.1 full installer?
1st test – 11.6 installed = 11.6.1 Full Installer
After using the 11.6.1 Full installer, macOS recovery will be updated to Monterey 12.0.1
2nd test – 11.6 installed – 11.6.2 Beta Update
The update showed up in system preferences as a full 11GB update. After updating, recoveryOS was Big Sur
3rd test – 11.6.1 installed – 11.6.2 Beta Update
Maybe the issue was just in the 11.6.1 update? After installing the 11.6.2 Beta update, recoveyOS was on 12.0.1 Recovery. You would think that the 11.6.2 Beta update would have installed 12.1 Beta recoveryOS but that was not the case.
If you still need to Reinstall Big Sur.
This is where the new M1 Recovery system comes in handy. All you need to do is create a Big Sur USB installer.
https://support.apple.com/en-us/HT201372
Boot to M1 Boot Picker by holding down Power.
Select Install macOS Big Sur.
You are now in recovery and can use the Big Sur USB installer to reinstall macOS Big Sur.
Conclusion
So what is the deal with this situation? We have a few possibilities.
This is a bug or mistake on Apple’s part. This is unexpected behavior that we have not seen before.
There is a technical reason behind the change.
Apple wants users to upgrade to Monterey when reinstalling macOS.
I’m not pointing in any one direction because I don’t know why this is happening.
I’ve submitted a ticket to Apple Enterprise Support to find out. I will update you when I hear back.
Thanks
Hat tip to someone who reached out to help clarify the situation.
2nd hat tip to Howard Oakley, Mark Buffington and Pico for additional confirmation plus answering some of my questions.
The macOS Big Sur upgrade is not checking to make sure enough free HD space is available. The upgrade will start, then run out of space and fail. If FV2 encryption is enabled, you will be locked out of your data!
UPDATED 10/07/21 –Latest Updates!!! – For the latest information be sure to check the UPDATES section below.
Quick Summary – When you start the macOS Big Sur upgrade, the installer should first check to make sure your Mac has enough free space available. If the installer finds that you do not have enough free space for the upgrade, it will stop and not let you continue. You should see a pop up message showing you how much space is needed before you can attempt the upgrade again. This free space check is NOT working. The upgrade will start even if you only have 1% of free space left and will fail. Your hard drive is now 100% full and the installer is now stuck in a boot loop attempting to finish the install. This leaves you unable access your data! I will go over all the details below and show you a fix at the end.
I’ve been trying to get a handle on this issue for over a month now. The first signs that this is becoming a larger issue came after the macOS Big Sur 11.2 update was made available. Reports started to roll in saying that the Big Sur Upgrade failed and the only way to fix it was to erase and reinstall macOS. I noticed an increase in traffic to this article. >
With Apple Silicon Macs, you can install macOS just like you can with iOS! I will show you how to boot your Apple Silicon Mac into DFU Mode so you can Restore macOS.
UPDATED 06/04/21
This article will go over how to restore macOS on your new Apple Silicon Mac. Your first line of defense for installing macOS on Apple Silicon should be macOS Recovery. But if for some reason you are having problems with that you can boot your Apple Silicon Mac with a Big Sur USB installer drive. I wrote an article covering all the changes to macOS Recovery here.
Order of that you should follow for reinstalling macOS on Apple Silicon.
1. macOS Recovery – Hold down the power button to enter the Boot Picker Menu (downloads macOS Big Sur over the internet 1-2 hours)
2. System Recovery – (Separate hidden partition – Will boot automatically if macOS Recovery is erased or damaged)
3. macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on Apple Silicon – (Installs from USB 30-40 Min)
4. Apple Configurator 2 REVIVE option – This option will reinstall macOS Recovery if erased or damaged (retains user data on the hard drive)
5.Apple Configurator 2 RESTORE option – This option will Reinstall macOS Recovery, ERASE your hard drive and reinstall macOS (Fast install! 10 min)
Use macOS Recovery on a Apple Silicon M1Mac
Keep in mind, just like last time, some of the instructions for booting your Apple Silicon Mac are confusing. If you thought booting to DFU mode was a little difficult on T2 Macs… wait until you try on Apple Silicon. For one thing the ports used are the exact opposite of what was used on T2 Macs! Plus the process to get the Mac into DFU mode has changed! That’s why I’m writing this article, to better explain the instructions.
Table of Contents
1. Updates
2. List of Apple Silicon Compatible Macs
3. Setup and Cable Requirements before you begin
4. Download Apple Configurator 2 app
5. How to Boot your Apple Silicon Mac into DFU Mode
6. Which Firmware version is your Mac on?
7. Instructions for the M1 13″ MacBook Pro & Air (2020)
8. Instructions for the M1 Mac Mini (2020)
9. Instructions for the M1 24″ iMac (2021)
10. You made it! Apple Configurator 2 Steps
11. Download macOS ISPW file
12. Begin Apple Silicon macOS Revive / Restore
13. Finishing Up
14. Can I Downgrade from an older version of macOS via IPSW Files?
UPDATE 4/13/21 – New DEEP DIVE video on using Apple Configurator 2 to reinstall macOS on multiple M1 Macs.
UPDATE 3/17/21 – I’ve added a new video that shows you how to use Apple configurator 2 to install macOS on multiple M1 Macs.
UPDATE 1/14/21 – Apple has released Apple Configurator 2 Version 2.13.3, be sure to update. I’ve also added a new Apple Silicon Mac Mini M1 Video above.
UPDATE 11/18/20 –Apple has released Apple Configurator 2 Version 2.13.2! Make sure you update. If you are still running 2.13.1 or below you will get an error when you click the restore button.
UPDATE 11/17/20 –Added a new section #6 to explain the problem booting to DFU mode if your Apple Silicon Mac is on it’s factory firmware of 6723.41.11
This is a list of Apple Silicon Macs that this process is compatible with.
1. 2020 M1 13″ MacBook Pro
2. 2020 M1 MacBook Air
3. 2020 M1 Mac Mini
4. 2021 M1 24″ iMac
3. Setup and Cable Requirements before you begin.
You will need to meet the following requirements –
(The Host Mac will do the work and the Target Mac is the Mac you need to Restore)
1. USB-C Mac as the Host Machine.
2. The Host Mac must have at least macOS 10.15.6 and Apple Configurator 2.13.1 or newer installed.
3. Internet access on the Host Mac – “You may need to configure your web proxy or firewall ports to allow all network traffic from Apple”
4. USB-C to USB-C Cable – The white Apple USB-C Charge will work fine. (USB-C Cable MUST Support Power & Data). Apple notes that a Thunderbolt 3 to Thunderbolt 3 cable is not supported but I’ve tested it and it works fine.
5. The Host Mac can have the cable plugged in anywhere.
6. The Target Mac MUST have the USB-C Cable Plugged in to the Left Hand side USB-C port. For Laptops the port closest to the back of the Mac or screen) For the Mac Mini it’s the port closest to the ethernet port. (BOTH LOCATIONS ARE OPPOSITE of the T2 Mac BridgeOS restore locations!)
If you don’t meet all the prerequisites booting to DFU Mode or Upgrading macOS Firmware might fail.
4. Download Apple Configurator 2
If you do not have Apple Configurator 2, you can download it now from the Mac App Store with this link.
5. How to Boot your Apple Silicon Mac into DFU Mode
With all the startup keyboard commands you can issue a Mac, booting into DFU Mode should be pretty simple right?
NOPE! (x2 this time for Apple Silicon!)
You have to follow a very particular sequence to get this to work. I have attempted to find the exact way to get this to work every time. Even then sometimes the system will refuse to Boot into DFU mode.
Apple’s Instructions
You can find Apple’s instructions for booting into DFU mode here.
If these instructions do not work fo you continue below.
Press the power button.
While holding down the power button, at the same time press all three of the following keys for about 10 seconds:
The right Shift key
The left Option key
The left Control key
After 10 seconds, immediately release the three keys but continue to hold down the power button until it appears in Apple Configurator 2.Note: You won’t see any screen activity from the Apple notebook computer.
6. Which Firmware version is your Mac on?
Did you update your Mac to Big Sur 11.0.1 from 11.0 when it arrived? If you didnt the firmware will be
6723.41.11
To find the firmware version click the Apple icon > About this Mac > System Report.
Look for System Firmware Version.
If you are on Big Sur 11.0 and firmware version 6723.41.11 you will need to boot to the macOS Recovery selection screen first before attempting to boot into DFU mode.
If you updated your Mac to 11.0.1 and are running Firmware Version 6723.50.2 or newer you can follow the normal instructions. You can boot to DFU mode from power off instead of booting to the macOS recovery selection screen first.
7. My Instructions for the M1 13″ MacBook Pro & MacBook Air
It has proven difficult to get an Apple Silicon Mac into DFU mode. You could try Apple’s instructions above multiple times and STILL not get into DFU mode.
Once you have meet all of the pre requisites above, follow the instructions below to should get you into DFU Mode every time.
1. The Target Mac must be OFF to begin.
2.Hold down the Power button,RightShift, Left Control and Left Option keys for 10 Seconds (count 1 one thousand) then let go of every key except for Power . Keep holding down the power button for an additional 8 seconds until you get to 18 seconds total. If you count more than 20 seconds and don’t see the DFU icon, you will have to try the process again.
3. When the Target Mac is booted into DFU mode correctly, the host will show a big DFU icon in Apple Configurator 2.
4. After you see the DFU picture pop up on the AC2 Host Mac you can let go of the Power Button.
8. Instructions for the M1 Mac Mini (2020)
The Mac Mini 2020 instructions are to use the USB-C port is closest to the Ethernet port.
1. Disconnect the power cord from the Mac Mini.
2. Plug USB-C/Thunderbolt cable into the USB-C port next to the ethernet port.
3. Plug the other end into the Host Mac.
4. While holding down the power button, connect the Mac Mini to power and continue to hold the power button for about 3-5 seconds
5. You should now see the DFU logo on the Host Mac.
9. Instructions for the M1 2021 24″ iMac
The 24″ M1 iMac (2021) instructions are to use the USB-C port is closest to the magnetic power port. The instructions are the same for both the 2 and 4 port version.
1. Disconnect the magnetic power cord from the iMac.
2. Plug USB-C cable into the USB-C port next to the power port.
3. Plug the other end into the Host Mac.
4. While holding down the power button, connect the iMac magnetic power plug continue to hold the power button for about 3-5 seconds
5. You should now see the DFU logo on the Host Mac.
10. Instructions for the M1 2021 24″ iMac
11. Instructions for the M1 2021 14″ and 16″ MacBook Pro
12. Instructions for the M1 2022 Mac Studio
10. You made it! Apple Configurator 2 Steps
The hard part is now over. Now we can restore macOS on the Target Mac. When you first open Apple Configurator 2 the screen will look like this.
Once your Mac is booted to DFU mode, you will see this screen on Apple Configurator 2. You are now ready for the next step.
11. Download macOS ISPW file (Optional)
Apple Configurator 2 version 2.13.2 will automatically download needed IPSW file just like it can for iOS. Let’s say that you want to download the IPSW so you can restore multiple times for testing, you can get it from my database below.
Once you’ve downloaded the macOS IPSW file, you are ready for Restore.
12. Begin Apple Silicon macOS Revive / Restore
1. Revive Option
The revive option will ONLY reinstall macOS Recovery. Go to step 2 for Restore.
You are now ready to restore either macOS Recovery with revive by Clicking Actions > Advanced > Revive Device.
Revive will reinstall macOS Recovery on your Apple Silicon Mac. This option retains user data.
2. Restore Option.
Restore will Reinstall macOS Recovery, ERASE your SSD hard drive and reinstall macOS.
You will now see a warning message. Do you want restore “MacBook Pro” to it’s Factory settings and latest firmware version?
Click the Restore Button to begin. Step one will download the latest macOS IPSW Firmware file directly from Apple.
You can also drag the macOS IPSW File over to the DFU icon to begin the restore.
After dragging the macOS 11 IPSW File over to the DFU logo you will get this pop up. You can select Restore to erase your drive and reinstall macOS. The process will only take about 15 minutes.
Step 2. Unzipping macOS
Step 3. Installing macOS
13. Finishing Up
If you would like to see more information you can click View and see a new activity window.
The entire process will only take a while. Most of the time is spent downloading the huge 13GB macOS Big Sur IPSW File. This is why it’s nice to keep the IPSW on an external hard drive or something. When you drag the IPSW File over to Apple Configuator 2, the restore will be super quick! Normally it only takes about 10 min!
When complete the Mac will automatically Boot up.
14. Can I Downgrade from an older version of macOS via IPSW Files?
The answer is YES, follow the link below for an explanation.
But only if the IPSW file is still signed by Apple. If Apple stops signing the IPSW file you will need to change the Boot Security to allow this. (Keep in mind Apple has not stopped signing any macOS installers yet, so we will see.)
15. Thanks
Hat tip goes out to macrumors forum user Nrwrit3r for the macOS Recovery menu workaround for older firmware!
NOTE 11/17/20! UNTIL I’M ABLE TO GATHER APPLE SILICON DATA I WILL LEAVE THE T2 BRIDGEOS TROUBLESHOOTING SECTION HERE.
I can’t get my Mac to boot into DFU mode. This is the toughest part of the whole process as I mentioned above. Keep trying the steps I listed above. Sometimes it takes multiple attempts to get his to work.
You can use System Information to see if the USB-C port lists your Mac in DFU Mode.
BridgeOS Restore Error 79- The OS Cannot be restored on this device. The Operation couldn’t be completed. (AMRestoreErrorDomain error 79 – Failed to handle message type StatusMsg) [AMRestoreErrorDomain – 0x4F (79)] – If you get this error it means that the BridgeOS update has failed and is unable to complete. The system will be unable to boot. When powered on the screen will be black. The Mac will have to be brought to an Apple Store for Service.
BridgeOS Restore Error 10 – The BridgeOS Restore failed! This is most likely because the host Mac was 1 or 2 OS Versions behind the Target Mac. The Host and Target Mac need to be on the same OS Version.
If your Target Mac is on 10.15, then your Host Mac needs to be on 10.15.
The OS Cannot be restored on this device.
The operation couldn’t be completed. (AMRestoreErrorDomain error 10 – Failed to handle message type StatusMsg) [AMRestoreErrorDomain – 0xA (10)]
Host Mac and Target Mac Disconnected during restore. – Error 4005
The OS Cannot be restored on this device.
Gave up waiting for device to transition from RestoreOS state to BootedOS State. [com.apple.MobileDevice.MobileRestore – 0xFA5 (4005)]
This error will come up when the restore process has been interrupted.
Or, you might get this using Apple Configurator 2 version 2.12.1, as the process never seems to complete properly. If the Target Mac awakes to the login window the process is complete even though the progress bar is at 100%. After unplugging the USB-C cable you will get the error above.
Apple Configurator 2 Reports RECOVERY instead of DFU Status.
If you see RECOVERY this means that BridgeOS is unable to boot and is the default status when you power on the Mac.
Failed BridgeOS Restore due to OS Version Mismatch! The Target Mac is a previous OS i.e 10.14 trying to restore a 10.15 Mac, the update will fail with an Error 10
If the Mac already failed the Upgrade, it could already be in this status. If so, you can attempt a BridgeOS restore.
Configurator could not perform the requested action. Apple Controller devices do not support this action.
This means that you selected Actions > Update, which is not supported. You need to select Actions > Advanced > Revive Device
Apple Configurator 2 BridgeOS Firmware Download Location.
Thanks MrMacintosh Reader Max C for letting me know the location of the BridgeOS Firmware files.
Apple said the first Apple Silicon Mac will launch before the end of 2020. The launch date is quickly approaching, now is the time to get up to speed! I will be following my “Everything you need to know” format from my previous articles.
This article will be updated as new Apple Siliconinformation comes in.
The feedback that I’ve received from these has been really great. The big takeaway is that everyone really likes how all the information is all in one place. You are not wasting time looking for that one article, command or link.
NOTE: Everything in this article is public knowledge from Apple. Once the first Apple Silicon Mac ships, I will post more in depth articles.
Apple Silicon changes the way in which we enter recovery on the Mac. In the past, we had to remember multiple keyboard commands. On Apple Silicon, all you need to do is hold down the power button. In a few seconds, you will see the new Apple Silicon Startup Manager.
7. How to use the new start manager on Apple Silicon
To enter Apple Silicon Startup manager follow these steps.
1. Hold down the power button
2. You will see the message “Continue holding for startup options”
3. The next message will say “Loading Startup Options…”
4. You will now see the new Apple Silicon Startup Manager.
The startup manager will show you the main boot disk (Macintosh HD) Boot icon and Recovery Options. Click “Options” to boot into macOS Recovery.
8. Internet Recovery is dead on Apple Silicon
Have you had trouble booting into Internet Recovery in the past? You are not alone. Now with Apple Silicon, Internet recovery is officially retired. It will still remain for Intel based Macs. For Apple Silicon we now have 3 different ways to reinstall macOS.
1. macOS Recovery = First line of recovery.
2. System Recovery = Hidden partition for when normal macOS recovery is not available.
3. macOS System Restore via DFU mode + Apple Configurator 2.
9. Apple Silicon macOS Recovery
Apple Silicon macOS Recovery is almost exactly the same as it is on Intel Based Macs. The only difference is Security Policy options was moved from the Menu bar to the “Startup Disk”.
10. Apple Silicon System Recovery
Apple Silicon System Recovery is a new hidden recovery option in addition to macOS Recovery. If for some reason macOS Recovery becomes corrupt, System recovery will load which is the same as macOS recovery. You can use it to reinstall macOS and macOS Recovery.
11. Both macOS Recovery and System Recovery are not available?
The blinking folder icon is now retired. If the Mac is not bootable, you will now see an old friend.
12. Apple Silicon External Boot Options – USB Installer
On Apple Silicon external boot remains, but has changed.
External Boot for the macOS installer is now enabled by default
You no longer need to enter Security Options to enable External Boot!
You can build out a USB Installer of macOS Big Sur and boot your Apple Silicon Mac to it. The big difference that ONLY the installer is available for a reinstall of the OS. You can NOT erase the drive in this mode.
13. How to Use Apple Configurator 2 to reinstall macOS on Apple Silicon
If all options to reinstall macOS fail you can now use Apple Configurator 2.
This will help with rapid deployment in lab / school situations.
14. Apple Silicon Security Policy
We know that an Apple Silicon Mac will have 2 Security modes.
1.Full Security = “iOS Security” – Only the latest signed version of macOS can be installed on an Apple Silicon Mac.
Full Security
Ensures that only your current OS, or signed operating system software currently trusted by Apple, can run. This mode requires a network connection at software installation time.
WWDC 2020
2. Reduced Security = Any version of macOS that was signed by Apple.
Reduced Security
Allows any version of signed operating system software ever trusted by Apple to run.
WWDC 2020
With the new Apple Silicon Security Policy, you can set a security policy for each container! On an Intel based Mac the security policy would be set on the entire system.
15. Apple Silicon Compatible Versions of macOS
Will you be able to install older versions of macOS? A quick review;
Full Security = iOS based security, only the latest signed version of macOS can run on the system.
Reduced Security = Any version of macOS that was signed by Apple can run on Apple Silicon
Note: The shipping OS version will be the oldest OS available to install.
16. Can I downgrade macOS on Apple Silicon?
Yes! But only with your Apple Silicon Security Policy set to “Reduced Security”.
17. How to use SMB Mac Sharing Mode (Replaces Target Disk Mode – TDM)
Target Disk Mode has been retired on Apple Silicon. It was replaced with Apple Silicon Mac Sharing Mode.
Boot to macOS recovery and then select “Mac Sharing Mode” you will be able to transfer data over USB-C cable. You will need to authenticate with a SecureToken User that is on the host Mac.
18. Apple Mac Mini Developer Transition Kit (DTK)
New Mac Developer Transition Kit with Apple Silicon, a comprehensive set of resources, and one-on-one technical support, you’ll have everything you need to get your Universal apps ready before Apple Silicon Macs become available to customers.– developer.apple.com/programs/universal/
Universal App Quick Start Program – Get your Universal apps ready. The Universal App Quick Start Program includes all the tools, resources, and support you need to build, test, and optimize your next-generation Universal apps for macOS Big Sur. – developer.apple.com/programs/universal/apply/
5. What’s New for Enterprise and Education WWDC 2020 June 2020 (v1.0) (AppleSeed Account Required)– appleseed.apple.com
6. AppleSeed – macOS 11.0 Big Sur Beta Release Notes(AppleSeed Account Required) – appleseed.apple.com
23. WWDC20 Video Links
Port your Mac app to Apple Silicon – Your porting questions, answered: Learn how to recompile your macOS app for Apple Silicon Macs and build universal apps that launch faster, have better performance, and support the future of the platform. We’ll show you how Xcode makes it simple to build a universal macOS binary.developer.apple.com/videos/play/wwdc2020/10214/
What’s new in managing Apple devices. – iOS, macOS, tvOS We’ve made significant strides in bringing crucial device management features to macOS. Discover how these features can help you manage your all your devices using the same tools and technologies. Get details on changes coming this year and how they will impact your deployment workflows– developer.apple.com/videos/play/wwdc2020/10639/
iPad and iPhone apps on Apple Silicon Macs. – Apple Silicon Macs can run many iPad and iPhone apps as-is, and these apps will be made available to users on the Mac through the Mac App Store. Discover how iPad and iPhone apps run on Apple Silicon Macs, and the factors that make your apps come across better.– developer.apple.com/videos/play/wwdc2020/10114/
Explore the new system architecture of Apple Silicon Macs – Discover how Macs with Apple Silicon will deliver modern advantages using Apple’s System-on-Chip (SoC) architecture. Leveraging a unified memory architecture for CPU and GPU tasks, Mac apps will see amazing performance benefits. developer.apple.com/videos/play/wwdc2020/10686/
24. MacAdmin Blog Links
This list is specifically for MacAdmins. This will be an ongoing list of articles and posts that will help you learn the latest 11.0 changes.
Multiple reports are coming in from users who are starting to have major problems after installing the latest Mojave 2020-005 Security Update.
UPDATE #8 – 10/01 10:00PM –Apple has just released a fix and I’ve just finished an article going over all the details. I tried to test and figure out every scenario that you might be in, so you know exactly what will happen.
UPDATE #5 – 9/28 7:30PM – I have added 3 new sections below. The first one shows you how to ignore the Mojave 2020-005 Security Update. The second will show you a very quick way to find out if your Mac is affected by this issue. In the 3rd, I will show you 4 different install scenarios. We now know the issue only happens if you install Safari 14.0 first, then install the 2020-005 update after. An example of a Mac that would unaffected by this issue would be if you installed the 2020-005 Security Update first, then the Safari 14.0 update after.
UPDATE #4 – 9/28 12:30PM – I have reproduced the install problem flow Please read section #5 below for more info. You can install the Mojave 2020-005 Security update WITHOUT Safari 14.0 and not have any issues. You can even Install Safari 14.0 after and not have any issues. It’s only when you install Safari 14.0 first then install 2020-005 after when the problems start! I will continue to test this and post updates.
UPDATE #3 – 9/28 11:30AM – After running some more tests, Safari 14.0 could be one of the problems. The next test performed was to build a fresh 10.14.6 Mac and install only the 2020-005 Security Update = No problems. I then installed Safari 14.0 = No problems. Then I reinstalled 2020-005 again = All Problems are back!!! I am going to check the order, maybe if Safari 14.0 is being installed first with softwareupdate this could be part of the problem. I am going to continue to test to find out more.
9/27
UPDATE #2 – 9/27 5:00PM – I am keeping an eye on Apple’s Software Update Server to see if they pull the update. I will update if they do.
UPDATE #1 – 9/27 3:30PM – A few users have asked if they can install the 2020-004 update over the 2020-005 update. They mentioned being able to do this in the past. Usually you can’t go backwards using Apple’s .pkg installers. I tested this out and sure enough, the installer says that a newer version of this update is installed. Apple didn’t design the installers to undo newer security updates. This is unlike the full .app installer which can replace all OS level files.
This article will include will be continually updated with the latest information on this issue.
I have some workarounds and fixes that could help you if you already installed the Mojave 2020-005 Security Update.
Past macOS Security Update Issues
This is not the first time that I’ve reported on update issues. Below you can read a few of the major issues that I’ve written about.
3. How can I tell if my mac is affected by this issue?
4. How can I ignore this update in software update?
5. How to Reproduce – Install Order
5. User Reports
6. This time around the issue can be reproduced
7. Fix! Rolling back with Automatic Update Snapshots. (within 24 hours of install)
8. Workarounds
9. If you are seeing this issue, please let Apple know.
10. Mojave 2020-005 Security Update Issue Links
11. Hat Tip/Credits
1. Mojave 2020-005 Security Update Problems
What are the reported problems with this update?
1. Memory issues – Reports of large increases of memory usage = no free memory and a large amount of compressed memory.
2. Slow boot & High fan speed
3. System slowness / stalling in finder
4. New local user can not be created through Users & Groups.
5. Migration assistant crashes to login window when started.
6. Large amounts of system.log entries – Class asn1SetToken is implemented in both /System/Library/PrivateFrameworks/StoreServices.framework/Versions/A/StoreServices
7. Errors when using tmutil localsnapshot /
8. Error when running softwareupdate -l (not sure if it causes any issues with the softwareupdate binary)
9. System locks up in Desktop & Screen Saver > Screen Saver when trying to select a picture type screen saver.
10. WindowServer Process using 4 times amount of memory. Should be anywhere between 40-125MB after the update it jumps to 400MB
11. cDock 4 – Dock customization app becomes unusable.
12. Menu bar sometimes does not change after switching from applications back to the finder.
1. Affected Safari & macOS Build Versions
This issue affects the following Safari & macOS Build Versions.
Safari 14.0 – September 16th, 2020
Mojave 10.14.6 Security Update 2020-005 (18G6032) – September 24th, 2020
No reports so far of this happening on macOS High Sierra 10.13.
2. Affected Mac Hardware
Past problems would only happen with certain hardware models. Not this time, if you installed the Mojave 2020-005 Security Update on a compatible Mac you might have problems.
3. How can I tell if my Mac is affected by this issue?
Very simple, just open up the terminal.app and run softwareupdate -l
If you get this error your Mac is affected.
Class AMSupportURLConnectionDelegate is implemented in both /System/Library/PrivateFrameworks/EmbeddedOSInstall.framework/Versions/A/EmbeddedOSInstall (0x1130cec58) and /System/Library/PrivateFrameworks/OSPersonalization.framework/Versions/A/OSPersonalization (0x112f31358). One of the two will be used. Which one is undefined.
4. How can I ignore this update in software update?
All you need to do is use the softwareupdate ignore option.
I discovered last night that on my Mojave test Mac that I couldn’t reproduce the issue even though I could on my 2nd test Mac. I realized that I only installed the 2020-005 Security update and NOT the Safari 14.0 update. This is when I restored back to the previous snapshot and tried again. For the next test, I let software update install both updates. Safari 14.0 was first then 2020-005, after the reboot I had the problem. Let’s go over a few of the install scenarios below.
Scenario #1 How to install both Updates and be affected by the issue.
1. 10.14.6 (18G103) Base Install
2. Use software update to install both Safari 14.0 and 2020-005 Updates
3. After the restart = You will have the problem.
Scenario #2 You installed Safari 14.0 as soon as it came out on 9/16
1. 10.14.6 (18G103) Base Install
2. Install Security Update 2020-005 + Reboot = You will have the problem
Scenario #3 How you can install both updates with NO PROBLEMS
1. 10.14.6 (18G103) Base Install
2. Install Security Update 2020-005 ONLY + Reboot = No Problem
3. Now Install Safari 14.0 = No Problem
Scenario #4 How you can install both updates with in the correct order and still have the problem
1. 10.14.6 (18G103) Base Install
2. Install Security Update 2020-005 ONLY + Reboot = No Problem
3. Now Install Safari 14.0 = No Problem
4. Install Security Update 2020-005 AGAIN + Reboot = You will have the problem (NOTE: the same problem happens if you use the 2020-004 installer in this step)
3. User Reports.
The first report came in on Thursday, just 4 hours after Apple released the Mojave 2020-005 Security Update.
Is anyone getting really low free RAM after applying this update? Activity Monitor says I have 12GB of RAM used right after I launch it after logging in.
I applied the 2020-005 Security Update today to my MacBook Pro running Mojave (10.14.6) and after it restarted, I started experiencing problems. The first and most obvious is the Dock crashes repeatedly. I have also noticed that when running applications, the menu bar does not display the app’s menus, but stays showing Finder menus. I downloaded the .dmg file with the updater on it and applied it again, thinking perhaps something went amiss the first time, but it did not resolve the issue.
After doing this job for many years, I get an sense when things are starting to become an issue. Just to be sure, I always wait for more reports and attempt to reproduce the issues myself before reporting.
Additionally, boot time is slower, logging in is slower and when doing so I’m met with a blank desktop which needs 7-8 seconds before icons finally appear. Everything feels sluggish, and applications also take more than twice as long to start up.
After reading multiple reports I felt that it was time me to take a closer look. Sure enough, more users have started to report the same issues.
4. This time around the issues can be reproduced
When issues like this have come up in the past, I might not be able to reproduce them. I have to go purely on user reports, which at times can be tough. I want to make sure the reporting is very accurate. Especially when I am recommending that users not install a security update. This time around is different, I have tested the update on multiple Macs and can reproduce most of the issues. I also found a few that have not been reported on the forums or twitter.
5. A Fix! Rolling back with Automatic Update Snapshots. (within 24 hours of install)
Do you have time machine backups?
If you do, just restore and you are good to go! Now would be a good time to start. If not keep reading.
Automatic Update Snapshots was introduced as a feature in macOS High Sierra. You can read about them below. This was one of the best features that Apple has ever added to macOS. Sadly they only work for 10.13 and 10.14 Security Updates and not 10.15 Catalina Combo Updates.
Automatic Update Snapshots could save you, if you installed the Mojave 2020-005 Security Update in the last 24 hours. That’s the problem with tmutil localsnapshots they only last 24 hours!!! So if you installed the update you might still be able to roll back to the previous Mojave Security Update 2020-004 (18G6020).
Steps to restore from an Automatic Update Snapshot.
Reboot to recovery. Hold down Command R
Once in recovery select “Restore from Time Machine Backup”
On the next screen select “Macintosh HD”. If your Mac is filevault encrypted you will be asked for your password.
On the next screen, if you have a snapshot available it will look like this.
5. Select it and hit continue! Your Mac will now restore back to the snapshot taken just before the 2020-005 Security Update was installed.
But what if 24 hours has past since you installed the update? Keep reading below.
6. Workarounds
If you don’t have an Automatic Update Snapshot available, hopefully one of the following options will help you.
Upgrade to Catalina. This was recommended by Apple Support. If don’t want to upgrade to Catalina yet, scroll down to option #2.
This workaround will reinstall macOS Mojave 10.14.6 (18G103) and you will be able to keep all your files and applications. All you need to do is download the Mojave Full installer from the App Store and reinstall. To keep your Mac protected, you can install Security Update 2020-004 and not have any issues.
You can also perform an erase and install if you have all your files backed up.
Multiple Hat tips go out to my website and twitter followers for reporting the issue to me so I could take a closer look. Special thanks to Hyram Hakkenbecker for double-checking my articles for any grammar issues that sneak past!
How to Boot to Internet Recovery, Recovery Partition or Diagnostics from inside macOS.
UPDATE 01/25/21 – Martin Nobel @martinnobel_ – If you want to make an Intel Mac boot into the Startup Manager automatically, type into terminal: “Sudo nvram manufacturing-enter-picker=true”
This means that we can boot to almost every single recovery mode EXCEPT for Internet Recovery!
When an undocumented macOS command or option is discovered, the MacAdmin community gets pretty excited. This is one of those times, as a new nvram key and value was uncovered over the weekend.
If you need to boot to Internet Recovery, you first need to remember the Mac Boot Up Keyboard Combination. Can you remember all of them? I can’t and I work on this stuff every day! Below is the complete list Mac Startup Key Combinations. The second article adds two additional keyboard combinations bringing the total to twelve! The first one will “Reinstall the macOS that came with your Mac, or the closest version still available.” The second command will “Upgrade to the latest macOS that is compatible with your Mac.”
Tim found an undocumented nvram command that you could use to boot your Mac to the Recovery Partition from macOS! From there, he had an idea to create an open source app that would allow you to boot to the Recovery Partition without knowing the exact command.
Someone found additional nvram keys and values!
I replied to Tim’s tweet letting him know that I put in an Apple Enterprise Support ticket to see if we could uncover if an Internet Recovery key existed. Before I could hear back from support, someone found and sent the new key internet-recovery-mode over to Tim. He then improved the app allowing you to boot into four different modes!
Nvram Keys and Values
The commands that we needed are set with two different keys and four different values.
The new values and keys are
recovery-boot-mode = Local Recovery Partition Value
unused Boot to Recovery Partition
internet-recovery-mode = Internet Recovery Value
RecoveryModeNetwork Internet Recovery (Shift-Option-⌘-R)
RecoveryModeDisk Recovery Partition (⌘- R)
DiagsModeDisk Boot to Local Apple Hardware Diagnostic (D)
DiagsModeNetwork Boot to Internet/AST Diagnostic (Option-D)
Let’s put it all together, keep in mind you must run the nvram as an administrator.
Your Mac will immediately reboot and start up in Internet Recovery Mode.
Compatibility, Caveats and Requirements
UPDATE 01/27/20
I tested the above commands with the following hardware and OS versions.
2018 T2 15″ MacBook Pro = 10.15.3 Beta 2
2016 13″ MacBook Pro = 10.14.6
2010 13″ MacBook Air = 10.13.6
This should confirm that the command works from 10.13.6-10.15.3 and on Mac Hardware from 2010-2019.
Network Requirements (For Internet Boot Options)
Wired Ethernet Connection
Wifi = Any WPA2 saved connection.
WPA2 Enterprise WIFI is NOT Supported
The WiFi network Internet Recovery will the Top “Preferred Network” listed to boot to Internet Recovery. If for some reason the Mac can’t connect to that network you will be prompted in firmware to connect to a different WiFi network or ethernet network.
Boot Security Requirements
Firmware Password Protection – can be ON or OFF. If ON then you will be required to enter in the firmware password.
Secure Boot – can enabled , the commands works fine.
FileVault – can be enabled, you do not have to enter in your FV2 password.
Restart Requirements
You do not have to reset the boot disk, clear out nvram commands or reset anything. When you restart the Mac, it will boot right back into macOS.
Twocanoes Recovery Selector.app = Easy Mode!!!
Are you going to remember all of the different nvram keys and values?
Probably not
Why not use one simple open source application to do this for you?
Tim had the great idea to take all the above command options and put them into one application. Two clicks gets your Mac rebooted to the Recovery Partition, Internet Recovery, Local HW Diagnostics or Internet HW Diagnostics.
Note: Admin access to reboot is not required, the app uses a LaunchDaemon.
You can download and try Recovery Selector.App below.
We are only missing one critical nvram Internet Recovery Value.
We are only one nvram value away from perfect.
Option-⌘-R
“Upgrade to the latest macOS that is compatible with your Mac.“
I am going to change my Apple Enterprise Support ticket into an Enhancement Request. If this final value is added we will have all 5 boot modes available in macOS.
If you have any questions please comment below or Contact Me!