# Apple Secure Boot
These settings in your config.plist can restrict which macOS versions OpenCore will boot. You will want to check these really quick before booting your USB.
# Misc
# Security -> SecureBootModel
OpenCore by default has Apple Secure Boot (opens new window) enabled.
This enables security features such as the verification of macOS' boot.efi, with the side effect of restricting which macOS versions OpenCore will boot.
- Big Sur and Above (11.0+): The recommended value is
Default. - High Sierra-Catalina (10.13-10.15):
- If your model is not listed below, set to
Disabled. - If running NVIDIA Web Drivers, set to
Disabled. - If your model is listed, compare the minimum version with the version your installing. Disable if your installer is below the minimum version listed for your SMBIOS.
- If your model is not listed below, set to
- Sierra and Below (10.4-10.12): This setting has no effect.
- If booting multiple versions, you may need to set the value to
Disabled.- For example, a non-T2 SMBIOS booting High Sierra and Big Sur would need this disabled.
- A T2 SMBIOS would be limited by the minimum version listed below.
T2 Mac Models
| SMBIOS | Minimum macOS Version |
|---|---|
| iMacPro1,1 (December 2017) | 10.13.2 (17C2111) |
| MacBookPro15,1 (July 2018) | 10.13.6 (17G2112) |
| MacBookPro15,2 (July 2018) | 10.13.6 (17G2112) |
| Macmini8,1 (October 2018) | 10.14 (18A2063) |
| MacBookAir8,1 (October 2018) | 10.14.1 (18B2084) |
| MacBookPro15,3 (May 2019) | 10.14.5 (18F132) |
| MacBookPro15,4 (July 2019) | 10.14.5 (18F2058) |
| MacBookAir8,2 (July 2019) | 10.14.5 (18F2058) |
| MacBookPro16,1 (November 2019) | 10.15.1 (19B2093) |
| MacPro7,1 (December 2019) | 10.15.1 (19B88) |
| MacBookAir9,1 (March 2020) | 10.15.3 (19D2064) |
| MacBookPro16,2 (May 2020) | 10.15.4 (19E2269) |
| MacBookPro16,3 (May 2020) | 10.15.4 (19E2265) |
| MacBookPro16,4 (June 2020) | 10.15.5 (19F96) |
| iMac20,1 (August 2020) | 10.15.6 (19G2005) |
| iMac20,2 (August 2020) | 10.15.6 (19G2005) |