The Mission

There has been much controversy on removing the firmware lock on a MBP, MBA, or similar Mac’s. The MBA is a bit more complicated without a specialty tool to interface with a header on the board. We use to have to remove the board, scratch back traces, and solder directly to them which can be seen in EX-1.1. This is just short of replacing the entire chip, which is what we are all trying to avoid right? I also have a project I have been forking on called the iFLRT (Firmware Lock Removal Tool) that can be found HERE. Donate what you can to keep my development process alive, every little red cent helps.

First you need to understand what the firmware lock is and how removing it will affect you. Then maybe you will be able to decide if this procedure is for you. In most cases a MBP has been purchased from a third party who may have stolen it or simply forgotten to remove their iCloud account. In this case the symptoms would be a four digit pin lock when the OS loads. When you try to do a re-install you are met with a lock screen shown in EX-1. This is the result of the Mac being most definitely locked from the cloud. There are two options from this point which are explained below.

EX-1

EX-1.1

NOTE: If you have a 2010 model MBP or earlier all you have to do is change the amount of RAM in your MBP and clear the PRAM. This is all you have to do to get past OS lock. But you will still have a firmware lock as far as I know as in many cases this has happened. There have been occasions where the firmware lock has also been removed but I cannot contest to any exact models. Remember to set the Mac up like new and register the Mac with a new iCloud account to avoid any future lock-downs.

Jan 28, 2016  Mac Hardware Requirements. For details about your Mac model, click the Apple icon at the top left of your screen, choose About This Mac, then choose More Info. These Mac models are compatible with OS X El Capitan: MacBook (Early 2015) MacBook (Late 2008 Aluminum, or Early 2009 or newer) MacBook Pro (Mid/Late 2007 or newer) MacBook Air (Late. I'm also running a 1,1 Mac Pro with Yosemite, using SFOTT. If there are any issues so far, it's that the stock graphics card won't run with acceleration. I threw an Nvidia 660 in mine. It runs beautifully, but I can't use the EFI boot menu, so dual booting to Windows would be a pain if I were planning to do so. May 26, 2019  In my last article on how to flash the 1,1 Mac Pro to a 2,1 Mac Pro firmware I didn’t mention how to upgrade the operating system. The problem with the 1,1/2,1 (2006-2007) Mac Pro is that the latest officially supported operating system is Mac OS X 10.7 Lion. In this article I will explain how to put OS X 10.11 El Capitan on your 1,1/2,1 Mac Pro.

Option A: You can assume that a firmware lock was never set and brute force the firmware lock with a HID device such as a Teensy. This operation can take quite a while because it has to go through 10,000 iterations of possible pass-phrases in the worst case scenario. This will ONLY work if it was set by the iCloud!

Efi Hacked Mac Pro Make El Capitan Runner

Option B: You can assume that a firmware lock was indeed implicated when the MBP was set up and that the brute force method will not work. This can save you time but requires you to have a SPI programmer at hand such as the Bus Pirate or in this case a Raspberry Pi.

In A Nutshell

I won’t waste time on the brute force method as I believe it isn't relevant in most cases. I will focus on the process of flashing the EFI chip that is usually easily accessible by removing the Macs’s back-plate, either by a small 15X2 header, 17X2 header, or the 8 pin SOIC chip itself. You can see an image of the SOIC8 chip in EX-2 and the header in EX-2.1. The process is simple but requires a bit of knowledge in micro controllers. I will use the easiest and cheapest route that I know. The process goes briefly like this:

EX-2

EX-2.1

Step 1 – Buy a SPI programmer such as the Raspberry Pi and a clip to interface with the chip. You can find the Pi on eBay, doesn't matter what model and you can find the Pomona SOIC8 clip there as well, usually with the female-to-female wires included. If you have a MBA then you can contact me about purchasing a clip for the header.

Step 2 - Read the chip three times and verify MD5 check-sum to ensure you have a good backup if things go wrong.

Step 3 – Make a copy of the dump and open it in a hex editor. I use Notepad ++.

Step 4 - Search for “$SVS” in the dump and you should find 2 instances. The first instance is what you will need to clear out making sure to keep the file length the same. It is safe to replace it with an empty value such as “ÿ”. The string including the $SVS should be replaced, you can copy and paste a portion of the string below if needed. each 'ÿ' is 2 bits and 8 bits make a byte So keep that in mind when you replace the string. The file size has to be exactly the same size as the chip or it will return an error.

This is an example of what to replace in a hex editor.

Step 4.1 – Get a clean dump that is not firmware locked from the community making sure you use the correct EMC and processor architecture. Make absolutely sure it is the same size as your original dump which is usually 2, 4, or 8 MB. If you go this route then you will need to replace the serial of the donated dump with your own serial in order to not register over their Mac. You can do this my simply searching for 'override-version' and on that same line there will be an 11 to 12 digit serial number that you will replace with your own. I also have a repository found HERE which you can use to search for your EMC number and I may have a clean dump.

Step 5 – Hook your programmer up to the chip, erase the chip, write the new dump and verify it.

Step 6 – Remove the clip and turn your Mac over to turn it on and test. You will immediately use the hot-keys to get to single user mode to test.

Step 7 – If you do not get to SU mode or the Mac does not boot right you will need to erase the chip and write the old dump back to it. You then can exhaust other options.

Step 7.1 – If you do get to SU mode turn the Mac back off and use the hot-keys to clear the PRAM. This will get rid of the 4 digit lock at OS load. Or you can simply re-install at this point. Remember to register the Mac to a new iCloud account to avoid future lock downs.

NOTE: Here are a few things worth mentioning...

• Make sure your chip is supported in Flashrom which is the program you will be using to talk to the chip.
• You need to make sure the clip makes a solid connection to avoid misreads.
• You need to verify your chips datasheet to correctly identify the pin-out to the SPI programmer.
• The wires connecting the clip to the SPI programmer need not be any longer than 8 cm.
• The battery may need to be connected due to voltage drop in special cases (RARE).
• The power cable should be removed from the Mac during the entire process, up until boot time testing.
• Always make sure to back up your original dump and verify the write.
• Optionally you can wire in resistors between the SPI programmer and the clip on the 3.3v pins.

That is the entire process in a nutshell. Now I will explain how you can do this in as much detail as possible. The first thing that you will need to do is pick up your entire inventory before you begin. After that lay everything out and do some testing. Make sure your chip is supported having the datasheet and any diagrams available. I also suggest after you get the clip connected to all the wires you check for continuity from the clips pins to the end of the F-F wires on each pin.

Down And Dirty

NOTE:Read this guide in its entirety before you attempt to do anything to your Mac; Read it twice if you have to. I would also like to take this time to tell you that I am not responsible for any damages to your personal property or your physical/mental wellness if the guide is used. There is no guarantee, implied or expressed, in this procedure. You are following this guide knowingly and accept that damaging your property may be the outcome. Although I do not for see that being the case as I have tested this method many times. With that being said, let’s get started.

This is the list of things you will need in order to successfully and easily fix your MBP:

• Raspberry Pi (Doesn't matter what version) with power supply and an SD card with Rasbian installed.
• 8 Pin Pomona SOIC clip or my EFI Easy Flash clip.
• 8 Female-to-Female wires.
• Flashrom.
• Your chip's datasheet (To verify the chips pin-out and voltage requirements).

Now, I am going to assume that you at least have some experience in Linux and basic troubleshooting skills. You will run into problems and they are not all going to be the same as everyone else’s problems. So critical thinking is also required although I have not added it to the list. When you have your Raspberry Pi all set up and Raspian is booted up you will need to set it up for the first time. if you have already set it up go to the terminal and type:

sudo raspi-config

While in this configuration screen make sure to turn SPI on under Advanced. You may also turn on SSH if needed.

Then you will need to do an update by typing:

sudo apt-get update

Followed by an upgrade:

sudo apt-get upgrade

Optionally doing a distrobution upgrade:

sudo apt-get dist-upgrade

Now we have to install a few libraries that Flashrom relies on:

sudo apt-get install pciutils

sudo apt-get install libftdi-dev

sudo apt-get install libusb-dev

sudo apt-get install libpci-dev

Then you need to download the latest flashrom version:

sudo git clone https://github.com/stefanct/flashrom.git

It will be downloaded into a folder called 'flashrom' so change directory into the folder:

cd flashrom

And make it:

sudo make

Then install it:

sudo make install

Now we need to modify the blacklist by commenting out the SPI entry if it exists:

Sudo nano /etc/modprobe.d/raspi-blacklist.conf

You will need to put “#” in front of the line that reads blacklist spi-bcm2708 effectively commenting it from the configuration file. If there is nothing in the file don't worry about it, that means SPI is not blacklisted. You can then save by hitting CTL+X, Y, and ENTER. You will then need to hook the wires up to the Pi and to the clip according to the diagrams below and your chip's datasheet. In MOST cases it will be just like what you see below.

Efi Hacked Mac Pro Make El Capitan Running

The actual pinout for most 25 series chips depicted above is as follows for those of you who need a more definitive answer:

• Pin 1 of the chip (marked with a small dot) which is CS (Chip Select) goes to pin 24 on the Raspberry Pi.
• Pin 2 of the chip which is MISO (Master Oin Slave Out) goes to pin 21 on the Raspberry Pi.
• Pin 3 of the chip which is WP (Write Protect) goes to pin 17 on the Raspberry Pi. (Usually Not Needed)
• Pin 4 of the chip which is GND (Ground) goes to pin 25 on the Raspberry Pi.
• Pin 6 of the chip which is MOSI (Master Out Slave In) goes to pin 19 on the Raspberry Pi.
• Pin 7 of the chip which is HOLD (Hold) goes to pin 17 in the Raspberry Pi. (Usually Not Needed)
• Pin 8 of the chip which is VCC (Positive Supply Voltage) goes to pin 17 on the Raspberry Pi (3.3v)

Connect the wires on the clip to the Raspberry Pi making sure it is turned off following the diagram above. The GPIO pin that is closest to the corner of the Raspberry Pi is pin 2, keep that in mind or read the manual. After you are all connected you will place the clip on the chip snugly and turn the Pi on. Go to your working directory and run the following commands using some discretion.

**Start of the Flashrom process**

Get to the help page:

sudo flashrom --help

List the supported chips:

sudo flashrom –L

Read the flash chip by using the below command three times:

sudo flashrom –r ~/efi/read1.bin -V -p linux_spi:dev=/dev/spidev0.0

Erase the chip after you have verified all three reads have a matching MD5 hash:

sudo flashrom -E -V -p linux_spi:dev=/dev/spidev0.0

Using the methods explained above either modify or get a clean dump making sure it is the same size as the original ROM and write it to the chip:

sudo flashrom -w ~/efi/new.bin -V -p linux_spi:dev=/dev/spidev0.0

Verify the chips contents with the file that you just wrote to ensure its integrity:

sudo flashrom -v ~/efi/bnew.bin -V -p linux_spi:dev=/dev/spidev0.0

If you have not run into any problems you will have a freshly flashed chip. If you did run into issue, use the forum here to start a thread and we will help you troubleshoot your error messages. The reason I always use the –V command is to ensure a verbose output. At this point shut your Pi down and then remove the clip. You will then replace your power supply to the Mac and then turn it on using hot-keys to try and get to SU mode. If you get to SU mode you will shut back down and use the hot-keys to clear PRAM and reinstall setting the Mac up as a new machine. Make sure to register it with a newly created or existing iCloud account to prevent further incidents. If you did not get to SU mode you will need to erase your chip and try again.

That’s it folks, this is the long awaited guide that has more than enough information to get you through the process. It is specifically designed to save you money in the recovery of your Mac and to seamlessly work through any prior issues you may have had using Flashrom with a windows PC. If this guide has helped you please think about the years of work I have spent making this possible for you and donate to my iFLRT project to make it even easier for others. Or you can donate to me by using the slider on the edge of the left hand side of the page to donate to my personal PayPal account. Good luck to you all and Happy Hunting…

Efi Hacked Mac Pro Make El Capitan Running Shoes

Mac OS X El Capitan: Being the 12th major release of macOS, Mac OS X El Capitan belongs to the Macintosh-Unix family of OS. It was majorly released for server OS for Macintosh computers and Apple Inc.’s desktop. Being the successor of OS X Yosemite, it mainly focuses on stability, performance, and security. There is a history in its name. Mac OS El Capitan was given its name behind a type of rock formation that is found in the Yosemite National Park, focusing its predefined goals towards a refined edition of Yosemite. It was the final version that was released beneath the name OS X, its successor, Sierra, was given the name under Mac OS X due to the reason that OS X is now named Mac OS.

License
Official Installer

File Size
5.7GB

Language
English

Developer
Apple Inc.

Mac OS El Capitan was released to manufacturing on 20th September 2015, almost three and a half years ago. Its latest version 10.11.6 (15G22010) was released on 9th July 2018, almost 7 months ago. It runs on the platform including x86-64. Mac OS El Capitan is preceded by OS X 10.10 Yosemite and it is succeeded by macOS 10.12 Sierra.

System requirements

All Macintosh PCs that can run Mountain Lion, Mavericks, or Yosemite can run El Capitan in spite of the fact that not the majority of its highlights will take a shot at more seasoned PCs. For instance, Apple noticed that the recently accessible Metal API is accessible on “all Macs since 2012”.

The following computers can run mac OS el Capitan provided that they must have a ram of 2GB or more –

• MacBook: Late 2008 or newer
  
• MacBook Air: Late 2008 or newer
  
• MacBook Pro: Mid 2007 or newer
  
• Mac Mini: Early 2009 or newer
  
• iMac: Mid 2007 or newer
  
• Mac Pro: Early 2008 or newer
  
• Xserve: Early 2009

Of these PCs, the accompanying models were outfitted with 1GB RAM as the standard alternative on the base model when they were sent initially. They can possibly run OS X El Capitan in the event that they have at any rate 2GB of RAM-

• iMac: Mid 2007
  
• iMac: Early 2008
  
• Mac Mini: Early 2009

The accompanying PCs bolster highlights, for example, Handoff, Instant Hotspot, AirDrop between Mac PCs and iOS gadgets, just as the new Metal API:

• iMac: Late 2012 or newer
  
• MacBook: Early 2015 or newer
  
• MacBook Air: Mid 2012 or newer
  
• MacBook Pro: Mid 2012 or newer
  
• Mac Mini: Late 2012 or newer
  
• Mac Pro: Late 2013

The redesign differs in size contingent on which Apple Mac PC it is being introduced on, in many situations, it will require around 6 GB of plate space.

What is DMG File

DMG represents Disk picture document. It is much the same as the ISO record which keeps running on Windows yet it keeps running on Mac OS. DMG is area by a segment of optical stockpiling media. DMG record is utilized rather than an optical plate. It has .dmg augmentation. Past Disk Image File has .smi and .img augmentation which depends on New Disk Image Format (NDF). The present DMG document depends on Universal Disk Image Format (UDIF). Widespread Disk Image Format underpins Zlib, ADC, bzip2 pressure calculation. DMG record depends on figuring out however it’s documentation isn’t discharged by Apple Company. It is more secure than ISO record. Plate Image Files are distributed with a MIME kind of utilization which is known as x – apple circle picture. There are distinctive record frameworks inside circle picture.

What is ISO file

ISO document is the copy or file record that contains every one of the information of optical plate-like CD or DVD. It represents the International Standard Organization. It is utilized to duplicate the precise record in light of the fact that in typical duplicate, it needs header document yet in an ISO record, every one of the information including the header record is The ISO name is taken from ISO9660 on the grounds that this component is utilized in circles yet ISO record has UDF(ISO/IEC 13346) document framework is utilized which is generally utilized in DVDs and Blu-beam Disks. It accompanies .iso augmentation.

Installing Mac OS X El Capitan

The installation process of mac os el Capitan includes two methods. The first method is termed as an upgrade install, also known as the default method. The second method is known as a clean install.

Upgrade install-

Follow to below steps-

• Visit the Mac App Store.
  
• Locate the OS X El Capitan Page.
  
• Click the Download button.
  
• Follow the simple instructions to

• complete the upgrade.
  
• For users without broadband access, the upgrade is available at the local Apple store.

Clean install-

For a clean install, at first, you will need a bootable version of OS X El Capitan installer. After getting a bootable drive or device follow the steps to boot-

1. Insert the device containing os X El Capitan installer.
2. While holding down the option key, restart the system
3. Select that particular device which contains the installer file.
4. The system will start from the device containing the installer.
5. Now, to erase the older version, click on disk utility and then click continue.
6. After the start of disk utility, select the volume to erase and perform the further steps to format the selected drive.

Starting the installation process-

1. With the startup volume deleted, you’re currently prepared to start the establishment of OS X El Capitan.
   
2. In the OS X utility window, select Install OS X, and snap the Continue catch. The installer will begin, despite the fact that it might take a couple of minutes.

Performing clean installation

1. In the install os window, click the continue button.
2. Read the terms and condition and agree with them.
3. Select the target disk and click on the install option.
4. Type your administrator password and click OK.
5. The installer will duplicate the needed files and then restart.
6. The progress bar will show the time required.
7. After the installation, the system will restart. Follow the further guided steps to setup mac OS X El Capitan.

Mac OS X El Capitan setup process-

1. The Welcome screen shows, requesting that you select which nation your Mac will be utilized in. Make your choice from the rundown, and snap the Continue catch.
   
2. Make your keyboard layout selection and press continue.
   
3. The Transfer Information to This Mac window will show up. Here you can move existing information from a Mac, PC, or Time Machine reinforcement to the clean introduce of OS X El Capitan.
   
4. Enable Location Services- By enabling this service, you are allowing the app to see the geographic location of your Mac.
   
5. Select the further option from the drop-down menu.
   
6. It’s up to you whether you have to enter an Apple Id or create a new one in the first step.
   
7. After that, read the agreement and agree to it.
   
8. Create a Computer Account choice will show. This is the head account, so make certain to take note of the username and password word you chose.
   
9. The Select Your Time Zone window will show. You can choose your time zone by tapping on the world guide or pick the nearest city from a rundown of real urban areas around the globe. Make your choice, and snap Continue.
   
10. The Diagnostics and Usage window will inquire as to whether you wish to send data to Apple and its designers about issues that may happen with your Mac or its applications. Make your determination, and snap Continue

The setup procedure is finished. After a couple of minutes, you’ll see the OS X El Capitan work area, which implies you’re prepared to begin investigating the perfect establishment of your new OS.

Mac OS X El Capitan 10.11 ISO / DMG Files Direct Download

Mac OS X El Capitan: Being the 12th major release of macOS, Mac OS X El Capitan belongs to the Macintosh-Unix family of OS. It was majorly released for server OS for Macintosh computers and Apple Inc.’s desktop. Being the successor of OS X Yosemite, it mainly focuses on stability, performance, and security. There is a history in its name. Mac OS El Capitan was given its name behind a type of rock formation that is found in the Yosemite National Park, focusing its predefined goals towards a refined edition of Yosemite. It was the final version that was released beneath the name OS X, its successor, Sierra, was given the name under Mac OS X due to the reason that OS X is now named Mac OS.

Price Currency: USD

Operating System: Mac OS X El Capitan 10.11

Application Category: OS