To be honest, this is a bit of a grey area for me. I don't change that part of my config. SIP for me is always Disabled Completely: Code (Text): <key>CsrActiveConfig</key> <string>0x67</string> I went via the clover wiki here : https://clover-wiki.zetam.org/Configuration/RtVariables#rtvariables_csractiveconfig. So, I my configuration it is always completely disabled. Unless clover wiki is wrong. If my setting is 0x0 then I would need to change prior to making the install. This is something I have asked previously in the forum, but have no direct answer.