After a few days, I was able to fine-tune my OC settings. I noticed that while running MacOS with SIP and SecureBoot disabled, Firefox and some other apps wouldn't work well. Investigating a bit more, I discovered that I had to remove
amfi=0x80 from
boot-args, and inject
AMFIPass.kext instead (
source). Doing so, I was able to have a stable system and keep Broadcom WiFI support when booting with SIP and SecureBoot enabled.
@pastrychef I have taken the liberty to prepare a new .zip file for others to use for OpenCore 0.9.7. It follows your standard format, feel free to add it to the first post. It's main differences to your 0.9.3 release are:
- Updated all kext to their latest versions.
- Included AMFIPass.kext (source).
- Included IOSkywalkFamily.kext, I.O80211FamilyLegacy.kext, AirPortBrcmNIC.kext (source).
- Replaced IntelMausiEthernet.kext with IntelMausi.kext (source).
- Allowed IOSkywalk downgrade (source).
- Removed AQuantia AQtion support (as it was giving me errors with OC validate and I don't use the card).
- Included support for booting Linux from OC (enabling OpenLinuxBoot.efi and ext4_x64.efi).
- LauncherOption set to Full to force Opencore to be prioritized in BIOS upon nvram resets.
The config.plist within the shared OC directory is set to keep SIP and Secure boot enabled. For safety reasons, I much prefer to follow
@snoopy69's advise and use a bootable USB to temporary disable the two features when major upgrades are needed (details on PDF inside
their .zip attachment here).
If anyone wants to disable SIP and SecureBoot to install root patches with OpenCore-Patcher, they might replace
EFI/OC/config.plist with the "No SIP No SecureBoot - config.plist" also included in the zip.