check Print out whether there is / isn't a firmware password is set NOTE: cannot set a mode without having set a password allow-oroms permits option roms execution 'full' - password required on all startups 'command' - password required to change boot disk In place, the mode will automatically be set to 'command' NOTE: if this is the first password set, and no mode is You will be promted for passwords as needed. But I did found it when I made a terminal command.Ī google search for 'sudo firmwarepasswd -disable-reset-capability' shows 6 hits only. Why is nobody speaking about this command? Why is it so hidden? I don't find any references here or on Google.

This together with a very hard Filevault2 password and a very hard firmware password should result in almost an impossible attempt to attack the computer and access the drive? The drive is soldiered on the motherboard and can only be accessed on same board that is running the same T2 chip that is also soldiered on. They try to clone your drive and attack it offline. And if you also enable a firmware password (which is required to change these settings) this means any attempt to attack the computer that feds usually do. The reason I am asking is because with the new T2 chip, you can set the computer to not allow to boot from other discs. So the question now is, can it somehow be removed for example Macbook pro 2018-2019 ? In many guides I am reading that even Apple can do this for you, if you can show proof that the computer belongs to you.Įxample section 2 'Have Apple Unlock the Mac Firmware Password For You'

Computers running T1 chip (or up to 2017) the firmware password could be resetted by accessing the logicboard and removing a chip.

Ios 9.1 ipsw osxdaily download