# MacBook Pro

# Starting Point

So making a config.plist may seem hard, its not. It just takes some time but this guide will tell you how to configure everything, you won't be left in the cold. This also means if you have issues, review your config settings to make sure they're correct. Main things to note with OpenCore:

  • All properties must be defined, there are no default OpenCore will fall back on so do not delete sections unless told explicitly so. If the guide doesn't mention the option, leave it at default.
  • The Sample.plist cannot be used As-Is, you must configure it to your system
  • DO NOT USE CONFIGURATORS, these rarely respect OpenCore's configuration and even some like Mackie's will add Clover properties and corrupt plists!

Now with all that, a quick reminder of the tools we need

And read this guide more than once before setting up OpenCore and make sure you have it set up correctly. Do note that images will not always be the most up-to-date so please read the text below them, if nothing's mentioned then leave as default.

# ACPI

This section is used for injecting custom SSDT tables and patching broken ACPI. For us, this is super important for Arrendale machines as we need to fix a broken PCI Bridge for Big Sur.

More info on ACPI

# Add

Add custom ACPI tables to our system, for Arrendale users ensure SSDT-CPBG is enabled.

# Delete

This blocks certain ACPI tables from loading, for us we can ignore this.

# Patch

This section allows us to dynamically modify parts of the ACPI (DSDT, SSDT, etc.) via OpenCore. For us we can ignore this.

# Quirks

Settings relating to ACPI, leave everything here as default as we have no use for these quirks.

# Booter

This section is dedicated to quirks relating to boot.efi patching with OpenRuntime, the replacement for AptioMemoryFix.efi

# MmioWhitelist

This section is allowing spaces to be passthrough to macOS that are generally ignored, useful when paired with DevirtualiseMmio

# Quirks

Info

Settings relating to boot.efi patching and firmware fixes, however most Mac firmwares already work OOB with the majority of Apple's software so we'll want to disable everything below:

Quirk Enabled
AvoidRuntimeDefrag No
EnableSafeModeSlide No
EnableWriteUnprotector No
ProvideCustomSlide No
SetupVirtualMap No

# DeviceProperties

# Add

Sets device properties from a map.

By default, the Sample.plist has this section set for Audio. This is mainly relevant for overriding our firmware's built-in properties however we have no need to do this at this moment.

TL:DR: Delete the PciRoot(0x0)/Pci(0x1b,0x0) entry

# Delete

Removes device properties from the map, for us we can ignore this

# Kernel

# Add

Kexts info

Here's where we specify which kexts to load, in what specific order to load, and what architectures each kext is meant for. By default we recommend leaving what ProperTree has done, however for SSE4.1 CPUs we recommend adding the following property:

  • Under Kernel -> Add, you can add MaxKernel property to block loading of certain kexts in older OSes. This can be beneficial for those dual booting multiple OSes with OpenCore
    • MinKernel | String | 18.00.00
    • 18.0.0 is Mojave's kernel, so these kexts are injected into Mojave and newer OSes. See below table for all values:
Kernel Support Table
OS X Version MinKernel MaxKernel
10.4 8.0.0 8.99.99
10.5 9.0.0 9.99.99
10.6 10.0.0 10.99.99
10.7 11.0.0 11.99.99
10.8 12.0.0 12.99.99
10.9 13.0.0 13.99.99
10.10 14.0.0 14.99.99
10.11 15.0.0 15.99.99
10.12 16.0.0 16.99.99
10.13 17.0.0 17.99.99
10.14 18.0.0 18.99.99
10.15 19.0.0 19.99.99
11 20.0.0 20.99.99
More in-depth Info

The main thing you need to keep in mind is:

  • Load order
    • Remember that any plugins should load after its dependencies
    • This means kexts like Lilu must come before VirtualSMC, AppleALC, WhateverGreen, etc

A reminder that ProperTree users can run Cmd/Ctrl + Shift + R to add all their kexts in the correct order without manually typing each kext out.

  • Arch
    • Architectures supported by this kext
    • Currently supported values are Any, i386 (32-bit), and x86_64 (64-bit)
  • BundlePath
    • Name of the kext
    • ex: Lilu.kext
  • Enabled
    • Self-explanatory, either enables or disables the kext
  • ExecutablePath
    • Path to the actual executable is hidden within the kext, you can see what path your kext has by right-clicking and selecting Show Package Contents. Generally, they'll be Contents/MacOS/Kext but some have kexts hidden within under Plugin folder. Do note that plist only kexts do not need this filled in.
    • ex: Contents/MacOS/Lilu
  • MinKernel
    • Lowest kernel version your kext will be injected into, see below table for possible values
    • ex. 12.00.00 for OS X 10.8
  • MaxKernel
    • Highest kernel version your kext will be injected into, see below table for possible values
    • ex. 11.99.99 for OS X 10.7
  • PlistPath
    • Path to the info.plist hidden within the kext
    • ex: Contents/Info.plist
Kernel Support Table
OS X Version MinKernel MaxKernel
10.4 8.0.0 8.99.99
10.5 9.0.0 9.99.99
10.6 10.0.0 10.99.99
10.7 11.0.0 11.99.99
10.8 12.0.0 12.99.99
10.9 13.0.0 13.99.99
10.10 14.0.0 14.99.99
10.11 15.0.0 15.99.99
10.12 16.0.0 16.99.99
10.13 17.0.0 17.99.99
10.14 18.0.0 18.99.99
10.15 19.0.0 19.99.99
11 20.0.0 20.99.99

# Emulate

Needed for spoofing unsupported CPUs like Pentiums and Celerons, currently Apple supports Penryn and newer in the macOS kernel

More info
  • Cpuid1Mask: Leave this blank
  • Cpuid1Data: Leave this blank
  • DummyPowerManagement: NO
    • Disables AppleIntelCPUPowerManagement

# Force

Used for loading kexts off system volume, only relevant for older operating systems where certain kexts are not present in the cache(ie. IONetworkingFamily in 10.6).

For us, we can ignore.

# Block

Blocks certain kexts from loading. Not relevant for us.

# Patch

Patches both the kernel and kexts.

# Quirks

Info

Settings relating to the kernel, for us we'll be enabling the following:

Quirk Enabled Comment
DisableLinkeditJettison YES Ensures full Lilu compatibility in Big Sur
PanicNoKextDump YES Allows for ease of on-screen debugging in High Sierra and newer
PowerTimeoutKernelPanic YES Avoids power-state related kernel panics in Catalina and newer
More in-depth Info
  • DisableLinkeditJettison: YES
    • Allows Lilu and others to have more reliable performance without keepsyms=1
  • ExtendBTFeatureFlags NO
    • Helpful for those having continuity issues with non-Apple/non-Fenvi cards
  • PanicNoKextDump: YES
    • Allows for easier reading of kernel panics logs when panics occur
  • PowerTimeoutKernelPanic: YES
    • Helps fix kernel panics relating to power changes with Apple drivers in macOS Catalina, most notably with digital audio.

# Scheme

Settings related to legacy booting(ie. 10.4-10.6), here we'll be leaving as-is.

More in-depth Info
  • FuzzyMatch: True

    • Used for ignoring checksums with kernelcache, instead opting for the latest cache available. Can help improve boot performance on many machines in 10.6
  • KernelArch: x86_64

    • Set the kernel's arch type, you can choose between Auto, i386 (32-bit), and x86_64 (64-bit).
    • If you're booting older OSes which require a 32-bit kernel(ie. 10.4 and 10.5) we recommend to set this to Auto and let macOS decide based on your SMBIOS. See below table for supported values:
      • 10.4-10.5 — x86_64, i386 or i386-user32
        • i386-user32 refers 32-bit userspace, so 32-bit CPUs must use this(or CPUs missing SSSE3)
        • x86_64 will still have a 32-bit kernelspace however will ensure 64-bit userspace in 10.4/5
      • 10.6 — i386, i386-user32, or x86_64
      • 10.7 — i386 or x86_64
      • 10.8 or newer — x86_64
  • KernelCache: Auto

    • Set kernel cache type, mainly useful for debugging and so we recommend Auto for best support

# Misc

Misc

# Boot

Settings for boot screen (Leave everything as default).

# Debug

Info

Helpful for debugging OpenCore boot issues(We'll be changing everything but DisplayDelay):

Quirk Enabled
AppleDebug YES
ApplePanic YES
DisableWatchDog YES
Target 67
More in-depth Info
  • AppleDebug: YES
    • Enables boot.efi logging, useful for debugging. Note this is only supported on 10.15.4 and newer
  • ApplePanic: YES
    • Attempts to log kernel panics to disk
  • DisableWatchDog: YES
    • Disables the UEFI watchdog, can help with early boot issues
  • DisplayLevel: 2147483650
    • Shows even more debug information, requires debug version of OpenCore
  • SerialInit: NO
    • Needed for setting up serial output with OpenCore
  • SysReport: NO
    • Helpful for debugging such as dumping ACPI tables
    • Note that this is limited to DEBUG versions of OpenCore
  • Target: 67
    • Shows more debug information, requires debug version of OpenCore

These values are based of those calculated in OpenCore debugging

# Security

Info

Security is pretty self-explanatory, do not skip. We'll be changing the following:

Quirk Enabled Comment
AllowNvramReset YES
AllowSetDefault YES
ScanPolicy 0
SecureBootModel Disabled This is a word and is case-sensitive
Vault Optional This is a word and is case-sensitive
More in-depth Info
  • AllowNvramReset: YES
    • Allows for NVRAM reset both in the boot picker and when pressing Cmd+Opt+P+R
  • AllowSetDefault: YES
    • Allow CTRL+Enter and CTRL+Index to set default boot device in the picker
  • ApECID: 0
    • Used for netting personalized secure-boot identifiers, currently this quirk is unreliable due to a bug in the macOS installer so we highly encourage you to leave this as default.
  • AuthRestart: NO
    • Enables Authenticated restart for FileVault 2 so password is not required on reboot. Can be considered a security risk so optional
  • BootProtect: Bootstrap
    • Allows the use of Bootstrap.efi inside EFI/OC/Bootstrap instead of BOOTx64.efi, useful for those wanting to either boot with rEFInd or avoid BOOTx64.efi overwrites from Windows. Proper use of this quirks is covered here: Using Bootstrap.efi
  • DmgLoading: Signed
    • Ensures only signed DMGs load
  • ExposeSensitiveData: 6
    • Shows more debug information, requires debug version of OpenCore
  • Vault: Optional
    • We won't be dealing vaulting so we can ignore, you won't boot with this set to Secure
    • This is a word, it is not optional to omit this setting. You will regret it if you don't set it to Optional, note that it is case-sensitive
  • ScanPolicy: 0
    • 0 allows you to see all drives available, please refer to Security section for further details. Will not boot USB devices with this set to default
  • SecureBootModel: Disabled
    • Enables Apple's secure boot functionality in macOS, please refer to Security section for further details.
    • Note: on genuine macs, there's little benefit to enabling and can actually cause kernel panics in Big Sur with this enabled

# Tools

Used for running OC debugging tools like the shell, ProperTree's snapshot function will add these for you.

# Entries

Used for specifying irregular boot paths that can't be found naturally with OpenCore.

Won't be covered here, see 8.6 of Configuration.pdf for more info

# NVRAM

NVRAM

# Add

4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14

Used for OpenCore's UI scaling, default will work for us. See in-depth section for more info

More in-depth Info

Booter Path, mainly used for UI Scaling

  • UIScale:

    • 01: Standard resolution
    • 02: HiDPI (generally required for FileVault to function correctly on smaller displays)
  • DefaultBackgroundColor: Background color used by boot.efi

    • 00000000: Syrah Black
    • BFBFBF00: Light Gray

4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102

OpenCore's NVRAM GUID, mainly relevant for RTCMemoryFixup users

More in-depth Info
  • rtc-blacklist: <>
    • To be used in conjunction with RTCMemoryFixup, see here for more info: Fixing RTC write issues
    • Mac users can ignore this section

7C436110-AB2A-4BBB-A880-FE41995C9F82

System Integrity Protection bitmask

  • General Purpose boot-args:
boot-args Description
-v This enables verbose mode, which shows all the behind-the-scenes text that scrolls by as you're booting instead of the Apple logo and progress bar. It's invaluable to any Hackintosher, as it gives you an inside look at the boot process, and can help you identify issues, problem kexts, etc.
debug=0x100 This disables macOS's watchdog which helps prevents a reboot on a kernel panic. That way you can hopefully glean some useful info and follow the breadcrumbs to get past the issues.
keepsyms=1 This is a companion setting to debug=0x100 that tells the OS to also print the symbols on a kernel panic. That can give some more helpful insight as to what's causing the panic itself.

Mid-

  • csr-active-config: 00000000

    • Settings for 'System Integrity Protection' (SIP). It is generally recommended to change this with csrutil via the recovery partition.
    • csr-active-config by default is set to 00000000 which enables System Integrity Protection. You can choose a number of different values but overall we recommend keeping this enabled for best security practices. More info can be found in our troubleshooting page: Disabling SIP
  • run-efi-updater: No

    • This is used to prevent Apple's firmware update packages from installing and breaking boot order; this is important as these firmware updates (meant for supported Macs) will not work.
  • prev-lang:kbd: <>

    • Needed for non-latin keyboards in the format of lang-COUNTRY:keyboard, recommended to keep blank though you can specify it(Default in Sample config is Russian):
    • American: en-US:0(656e2d55533a30 in HEX)
    • Full list can be found in AppleKeyboardLayouts.txt
    • Hint: prev-lang:kbd can be changed into a String so you can input en-US:0 directly instead of converting to HEX
Key Type Value
prev-lang:kbd String en-US:0

# Delete

Info

Forcibly rewrites NVRAM variables, do note that Add will not overwrite values already present in NVRAM so values like boot-args should be left alone. For us, we'll be changing the following:

Quirk Enabled
WriteFlash YES
More in-depth Info
  • LegacyEnable: NO

    • Allows for NVRAM to be stored on nvram.plist, needed for systems without native NVRAM
  • LegacyOverwrite: NO

    • Permits overwriting firmware variables from nvram.plist, only needed for systems without native NVRAM
  • LegacySchema

    • Used for assigning NVRAM variables, used with LegacyEnable set to YES
  • WriteFlash: YES

    • Enables writing to flash memory for all added variables.

# PlatformInfo

Info

For setting up the SMBIOS info, we'll use CorpNewt's GenSMBIOS application.

For this MacBook Pro example, we'll chose the MacBookPro11,1 SMBIOS - this is done intentionally for compatibility's sake. There are 2 main SMBIOS used for our hardware:

SMBIOS Hardware
MacBookPro11,1 For single GPU models
MacBookPro11,2 For dual GPU models
  • Reason we change SMBIOS is this allows for native OS updates in macOS without any extra work, note however that this will show up as a new Mac on your Apple ID
  • If you do not want to inject a new SMBIOS, disable UpdateSMBIOS, UpdateDataHub, UpdateNVRAM and SpoofVendor then add to your boot-args -no_compat_check to avoid SMBIOS detection in macOS. However OS updates will be unsupported

Run GenSMBIOS, pick option 1 for downloading MacSerial and Option 3 for selecting out SMBIOS. This will give us an output similar to the following:

  #######################################################
 #               MacBookPro11,1 SMBIOS Info            #
#######################################################

Type:         MacBookPro11,1
Serial:       C02KCYZLDNCW
Board Serial: C02309301QXF2FRJC
SmUUID:       A154B586-874B-4E57-A1FF-9D6E503E4580
  • The Type part gets copied to Generic -> SystemProductName.

  • The Serial part gets copied to Generic -> SystemSerialNumber.

  • The Board Serial part gets copied to Generic -> MLB.

  • The SmUUID part gets copied to Generic -> SystemUUID.

For ROM, you can simply pull this from the Mac itself with Terminal:

# List all network interfaces
networksetup -listallhardwareports

# Grab the Address of en0
 Hardware Port: Ethernet
 Device: en0
 Ethernet Address: b0:6e:bf:c2:af:ff

 Hardware Port: Wi-Fi
 Device: en1
 Ethernet Address: b8:09:8a:c3:a3:4f

 Hardware Port: Bluetooth PAN
 Device: en2
 Ethernet Address: b8:09:8a:c3:a3:50

# Remove : from the Address
ROM = b06ebfc2afff

Automatic: YES

  • Generates PlatformInfo based on Generic section instead of DataHub, NVRAM, and SMBIOS sections

# Generic

More in-depth Info
  • AdviseWindows: NO

    • Used for when the EFI partition isn't first on the Windows drive
  • SystemMemoryStatus: Auto

    • Sets whether memory is soldered or not in SMBIOS info, purely cosmetic and so we recommend Auto
  • ProcessorType: 0

    • Set to 0 for automatic type detection, however this value can be overridden if desired. See AppleSmBios.h for possible values
  • SpoofVendor: YES

    • Swaps vendor field for Acidanthera, generally not safe to use Apple as a vendor in most case as unwanted firmware updates and EFI checks will run.
  • UpdateDataHub: YES

    • Update Data Hub fields
  • UpdateNVRAM: YES

    • Update NVRAM fields
  • UpdateSMBIOS: YES

    • Updates SMBIOS fields
  • UpdateSMBIOSMode: Create

    • Replace the tables with newly allocated EfiReservedMemoryType, use Custom on Dell laptops requiring CustomSMBIOSGuid quirk
    • Setting to Custom with CustomSMBIOSGuid quirk enabled can also disable SMBIOS injection into "non-Apple" OSes however we do not endorse this method as it breaks Bootcamp compatibility. Use at your own risk

# UEFI

ConnectDrivers: YES

  • Forces .efi drivers, change to NO will automatically connect added UEFI drivers. This can make booting slightly faster, but not all drivers connect themselves. E.g. certain file system drivers may not load.

# Drivers

Add your .efi drivers here.

Only driver present here should be:

  • OpenRuntime.efi

# APFS

Settings related to the APFS driver, leave everything here as default.

# Audio

Related to AudioDxe settings, for us we'll be ignoring(leave as default). This is unrelated to audio support in macOS and is mainly relevant for PCs

# Input

Related to boot.efi keyboard passthrough used for FileVault and Hotkey support on PCs, leave everything here as default.

# Output

Relating to OpenCore's visual output, leave everything here as default as we have no use for these quirks.

# ProtocolOverrides

Recommended options

Used for overriding your firmware's protocols allowing for non-invasive, non-permanent firmware updates. The main ones we want to enable:

Quirk Enabled Comment
AppleBootPolicy YES Upgrades built-in APFS driver, recommended for all as many legacy macs have buggy APFS implementations
AppleDebugLog YES Ensures debug logs are handled correctly when using AppleDebug quirk
AppleEvent YES Ensures FileVault 2 support with proper key handling in newer versions of macOS

# Quirks

Relating to quirks with the UEFI environment, for us we'll be ignoring

More in-depth Info
  • DeduplicateBootOrder: YES

    • Request fallback of some Boot prefixed variables from OC_VENDOR_VARIABLE_GUID to EFI_GLOBAL_VARIABLE_GUID. Used for fixing boot options.
  • IgnoreInvalidFlexRatio: NO

    • Fix for when MSR_FLEX_RATIO (0x194) can't be disabled in the BIOS, required for all pre-Skylake based PCs
  • RequestBootVarRouting: YES

    • Redirects AptioMemoryFix from EFI_GLOBAL_VARIABLE_GUID to OC_VENDOR_VARIABLE_GUID. Needed for when firmware tries to delete boot entries and is recommended to be enabled on all systems for correct update installation, Startup Disk control panel functioning, etc.
  • UnblockFsConnect: NO

    • Some firmware block partition handles by opening them in By Driver mode, which results in File System protocols being unable to install. Mainly relevant for HP systems when no drives are listed

# ReservedMemory

Used for exempting certain memory regions from OSes to use, mainly relevant for Sandy Bridge iGPUs or systems with faulty memory. Use of this quirk is not covered in this guide.

# Cleaning up

Last Updated: 10/30/2020, 1:08:17 AM