IMPORTANT INFORMATION READ THIS FIRST:
- I bought a Mac Mini, and a Mac Book Air. This hasn't been updated in a hot minute because I swapped to an Intel card on my hack. Fork if you want to update it.
- OpenCore Legacy Patcher does not officially support being run on non-Apple Hardware. The OCLP Discord does not provide any support for hacks using OCLP.
- The Hackintosh Paradise Discord provides limited support for Hacks running root patching of any kind, including OCLP. If you are not comfortable with patching your system, or maintaining a root patched system, you should remain on a version of macOS that supports your hardware.
Original instructions provided by OCLP team can be referenced here.
OCLP can be downloaded here.
-
SIP (System Integrity Protection) must be set to a reduced state, 0x803. In your
config.plist
make sure the following value is set underNVRAM>Add>7C436110-AB2A-4BBB-A880-FE41995C9F82
.-
csr-active-config | data | 03080000
Note: Add
csr-active-config
toNVRAM>Delete>7C436110-AB2A-4BBB-A880-FE41995C9F82
as well or make sure to reset your NVRAM. Adding it to this section of yourconfig.plist
means OpenCore will take care of changing the value for you on reboot automatically.
-
-
AMFI set to disabled. In your
config.plist
add the following to your boot arguments underNVRAM>Add7C436110-AB2A-4BBB-A880-FE41995C9F82
.boot-args | string | amfi=0x80
-
Secure Boot Model set to
Disabled
. Changing the secure boot status requires an NVRAM reset, if not some variables are retained which can cause issue with IMG4 verification in macOS. (Thanks to Khronokernel for the heads up!)- ApECID cannot be used with root patches, it needs to be disabled and remain disabled.
-
Block kext:
com.apple.iokit.IOSkywalkFamily
(reference plist: availabe here, thanks OCLP team!) Make sure to set theMinKernel
value in your plist to 23.0.0 so this is only blocked for Sonoma if you are booting multiple OS versions. -
Inject kexts: IOSkywalk.kext, IO80211FamilyLegacy.kext - this one also has a child kext
AirPortBrcmNIC.kext
make sure that is injected as well. For all three set theMinKernel
version to 23.0.0 so they are only injected in Somona if you are booting multiple OS versions. -
Once the changes have been applied, reboot, reset your NVRAM and then OpenCore Legacy Patcher should now show the option to apply root patches.
-
Once rebooted, open OpenCore Legacy Patcher, and click on
Post-Install Root Patch
.- A screen should pop up, showing your system as eligible for
Modern Wireless
patches. (Other patch sets are unsupported on Hacks, apply at your own risk!) - Click
Start Root Patching
to have OCLP begin to make its changes.
NOTE: OCLP needs root privileges in order to modify system files. If the application asks to re-start as root, make sure to click yes and provide your password. Alternatively you can run the application through Terminal with the
sudo
option to escalate the privileges!- When OCLP has finished patching, you'll get a pop up asking you to reboot. Reboot and you should have working Wi-Fi on your system! WOOHOO!
- A screen should pop up, showing your system as eligible for
- If the SMBIOS used on your hack is a model with a T2 chip, you will not be able to apply updates through System Settings without additional steps. In order to re-enable them, you need to use RestrictEvents.kext with the boot-arg
revpatch=sbvmm
. This should allow you to then update through System Settings normally.
- Once your root volume has been patched, SIP must remain at least partially disabled (the settings applied to your config.plist), or you will not be able to properly boot your system.
- Delta updates are unavailable to root patched sytems, so updates will show as the full 12GB+ installers. Though not recommended, it is possible to revert your patches and update, then re-apply them if you absolutely cannot download the full update, but do so at your own risk.
- AMFI can be partially re-enabled using AMFIPass.kext from OCLP. This can be handy if you're running into issues with an application you use related to AMFI.
- If you run into issues with Electron based apps after disabling SIP, ie: Discord, Google Chrome, VS Code, you can try adding the following boot-arg
ipc_control_port_options=0
.