Contribute
Register

[Guide] Install High Sierra or Mojave on the Dell Optiplex 7010 / 9010 Desktop PC - Revision II

trs96

Moderator
Joined
Jul 31, 2012
Messages
13,243
Motherboard
GA-Z97X-UD3H-BK
CPU
i5-4690K
Graphics
HD4600 / RX 570
Mac
iMac, Mac mini
Mobile Phone
Android
So, I know exactly what I modified in the Framebuffer kext, so I reversed that back. (The guide I found on fixing HD 4000 Graphics said to add a hardware ID to the info.plist file. I removed the hardware ID and rebuilt the index.) Here are all options in my BIOS with the exception of the ones under Image Server and System Logs.
If you flashed the BIOS and loaded Optimized Defaults and then made the changes in the guide, I don't think the BIOS settings have anything to do with HD4000 problems. If you use the kexts specified in step 5 and install those properly HD4000 will work without having to mod any kexts. Compare your current BIOS settings with those in step 1 and see how they compare.
 
Joined
Mar 11, 2019
Messages
19
Motherboard
Dell Optiplex 7010 Desktop
CPU
i3
Graphics
NVS 510
Mac
MacBook Pro, Mac Pro
I did a reinstall and on first boot all the kexts were all installed and ready, graphics acceleration is working. I've rebooted a couple times and all seems to be well.

BIOS is all set.

I am, however, still having a problem with videos freezing the computer. I've noticed specifically that it happens in Twitteriffic and Apple News, but sometimes it will happen in Safari as well. I'm going to post so I can switch back to my admin account and run another debug.

EDIT: Is there some sort of safe mode that can be tripped? It was working, it froze because I hit a webpage with a video and when it came back my acceleration was dead.
 
Last edited:
Joined
May 9, 2010
Messages
164
Motherboard
DELL Optiplex 7010
CPU
i5-3475S/Q77
Graphics
HD 4000
Mobile Phone
Android
I wouldn't be too confident that will work even with the right cable. Can you still return that card and get one of these:
I ordered this one today - cannot send the one I have back....but I have another OP7010 that I am going to put Windows 10 on - so I can use it for that one.

Grizz
 

Sniki

Moderator
Joined
Jan 5, 2016
Messages
1,357
Motherboard
Lenovo V330 - 15IKB
CPU
i5-8250U
Graphics
UHD 620 /1920x1080
Mobile Phone
iOS
As promised, here's my debug.
Give this one a try, open config.plist and into Devices/Properties/ add these patches:
393204

Reboot and check if situation improves, if not try adding the DSDT/Fixes/AddIMEI=YES and give it another try.
 
Joined
Jun 20, 2015
Messages
17
Motherboard
Dell Optiplex 7020
CPU
i5-4670
Graphics
HD 4600
That's why it takes too long to boot, so does mine, it has no effect on Windows but on macOS i can tell that from my experience it takes too long to boot with it turned off and on HP elite disabling the AMT disables the IMEI as well for me. So that causes long boot time and no QE/CI.YMMV
That is absolutely correct, thanks. I just powered up my HP8300 with 3245 (HD4000) in it and with AMT Diasabled it takes 62 seconds to boot and with AMT enabled in BIOS it takes just 9 seconds (similar to what it takes with AMT Disabled but NV710 in it). So this is so weird that enabling something thats only used by corporations for remote admin etc fixes the HD4000 boot up time! I am gobsmacked. I've been disabling AMT thinking it should boot a touch quicker without it, yet clearly, for MacOS/HD4000 its the other way round. Thanks for the pointer. So now back on topic of Dell 7010, I guess we need a way to enable AMT for those machines (most?) that have MEBx disabled at the factory in order to get them to boot with HD4000 in a timely manner.
 

trs96

Moderator
Joined
Jul 31, 2012
Messages
13,243
Motherboard
GA-Z97X-UD3H-BK
CPU
i5-4690K
Graphics
HD4600 / RX 570
Mac
iMac, Mac mini
Mobile Phone
Android
I guess we need a way to enable AMT for those machines (most?) that have MEBx disabled at the factory in order to get them to boot with HD4000 in a timely manner.
This is a case of either you have it or you don't. There's really no easy way to enable MEBx if it's already disabled at the factory, other than completely replacing the Intel ME chip on the motherboard or re-flashing the existing one. Probably not worth it. I was lucky that my 7010 USFF has it enabled. HD4000 is the only graphics option. I think that the security vulnerabilty aspect of AMT is why businesses and government offices have it completely disabled on some Dells before they even ship. Here's some info on why they do this:
AMT is Intel’s remote maintenance feature used on Intel vPro-enabled and Xeon processors. MEBx is a BIOS extension used to manually configuring the AMT service. When configured properly, MEBx is password protected.

Researchers at F-Secure, who outlined their research in blog post Friday, said typically users don’t change the MEBx password from the default password “admin”.
“The issue allows a local intruder to backdoor almost any corporate laptop in a matter of seconds, even if the BIOS password, TPM Pin, Bitlocker and login credentials are in place,” F-Secure wrote.
The attack starts with a reboot the target’s laptop/desktop into the PC’s boot menu. Typically, an adversary would not be able to bypass a BIOS password, stopping the attack in its tracks, said researchers.

“In this case, however, the attacker has a workaround: AMT. By selecting Intel’s Management Engine BIOS Extension (MEBx), they can log in using the default password ‘admin,’ as this hasn’t most likely been changed by the user. By changing the default password, enabling remote access and setting AMT’s user opt-in to ‘None’, a quick-fingered cyber criminal has effectively compromised the machine,” F-Secure wrote.
One minute plus boot times are hardly tolerable so everyone that has AMT should enable it. Simply change the admin password while in MEBx. I've changed my default "admin" password to something secure. Probably a good idea for anyone else that has it enabled to do so as well. It's not a high risk for home users but it's so simple to change it, why not ? Press Ctrl and P keys together at boot up, sign in with admin and then change the password to something with 8 characters including letters, numbers and one special character. MEBx won't let you change it to an insecure password. It lets you leave it at the totally insecure "admin" which is no password at all. Hard to understand that one. :think:
 
Last edited:
Joined
Jun 20, 2015
Messages
17
Motherboard
Dell Optiplex 7020
CPU
i5-4670
Graphics
HD 4600
This is a case of either you have it or you don't. There's really no easy way to enable MEBx if it's already disabled at the factory, other than completely replacing the Intel ME chip on the motherboard or re-flashing the existing one. Probably not worth it. I was lucky that my 7010 USFF has it enabled. HD4000 is the only graphics option. I think that the security vulnerabilty aspect of AMT is why businesses and government offices have it completely disabled on the some Dells before they even ship. Here's some info on why they do this:
Thanks for the info. I'm looking on a forum now where folks have had success writing the specific ROM area with that from an enabled-ROM. Here's the instructions, although looks a little risky, I'm not sure I want to risk a motherboard. "
1. Flash BIOS to A25
2. Reboot
3. Reset BIOS to defaults
4. Reboot
5. Adjust BIOS settings to your liking
6. Shutdown
7. Set jumper to Service mode
8. Flash me_fix.bin via "fpt -rewrite -me -f me_fix.bin"
9. Shutdown
10. Set jumper back to normal mode
11. Perform ME reset via "fpt -greset"
12. Reboot
13. AMT should be operational"
 

trs96

Moderator
Joined
Jul 31, 2012
Messages
13,243
Motherboard
GA-Z97X-UD3H-BK
CPU
i5-4690K
Graphics
HD4600 / RX 570
Mac
iMac, Mac mini
Mobile Phone
Android
Thanks for the info. I'm looking on a forum now where folks have had success writing the specific ROM area with that from an enabled-ROM. Here's the instructions, although looks a little risky, I'm not sure I want to risk a motherboard. "
1. Flash BIOS to A25
2. Reboot
3. Reset BIOS to defaults
4. Reboot
5. Adjust BIOS settings to your liking
6. Shutdown
7. Set jumper to Service mode
8. Flash me_fix.bin via "fpt -rewrite -me -f me_fix.bin"
9. Shutdown
10. Set jumper back to normal mode
11. Perform ME reset via "fpt -greset"
12. Reboot
13. AMT should be operational"
If you want to be the guinea pig and try it out you could help out the community. I wouldn't try this if my Dell had AMT disabled. I guess the replacement motherboards are less than 20 dollars but it's still a hassle to completely replace one.
 
Top