- Joined
- Feb 21, 2017
- Messages
- 194
- Motherboard
- HP Envy 17-U275CL
- CPU
- i7-8550U
- Graphics
- GTX MX150 / HD 620, 1920x1080
- Mac
- Mobile Phone
No no. I believe you. You are right. I am just saying that 0x0 gives the gatekeeper pop up which seemed to be key for me.The error/warning message's sole purpose is to pop up if unsigned kexts are being allowed, it doesn't do anything else, look at the pre-install Perl script if you don't believe me. 0x67 doesn't set the 'user approved kernel extensions' CSR bit, unless you've already installed any version of the web drivers previously you should get the prompt to allow them to load. Either way, they load with that bit set, with or without a security prompt.That sounds about right.
Not to reiterate but the first time I installed the original HS release. I did nothing with SIP. CSRActive config was set to 0x67. I installed the web drivers, got the error message continued, rebooted and I boot looped - Removed the web drivers, booted with CSRActive Config 0x0 , installed the web drivers, got gatekeeper, allowed, rebooted - still boot looped. Then I added NVWebDriverLibValFix. I was in.
The 2nd time I installed, this was the "newer" High Sierra 14A405 or whatever - First, I couldn't even install it with NVWebDriverLibValFix injecting from Clover. I removed that so I was back to the SAME EFI I was using the first time around. This time, I booted with CSRActive config 0x0, installed the web drivers, allowed in gatekeeper and then before rebooting set CSRActive Config back to 0x67. Rebooted. No boot loop no drama.
Both were fresh installs from a createinstallmedia made USB stick, minstallconfig.xml "ConvertToAPFS false", with all kexts injecting from Clover.I digress though, it was 2 different versions of the web driver and HS, so it is possible that the SIP trick wasn't even needed the 2nd time around. I just did it for good measure. I should wipe and go a third time doing everything the same as my first install but with the new HS and new Web drivers - not bothering to change SIP at all, leaving it 0x67
Last edited: