Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
Re: disable firmware lock intel laptops
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: disable firmware lock intel laptops



OFPW (the latest version) is a universal binary and works.  OFPW -command 0
will turn it off.

You could also use NVRAM, built in to the OS....

Sudo nvram -p shows you all the variables currently in your nvram....

 sudo nvram security-mode=none

Turns off security, to turn it on

 sudo nvram security-mode=command

To set the password, you need to know the encrypted version of it....set the
password on another machine, then use sudo nvram-p to see it, copy the
encrypted form of the password and use

 sudo nvram security-password=<place encrypted password here>
 sudo nvram security-mode=command

I use this from LANrev and sending unix scripts to set users firmware
passwords that may be wrong....or missed during a service call.

You can script a firmware password check script using openssl so that you
don't have to put the weakly encrypted password in a visable script...

http://bestsinceslicedbread.blogspot.com/2009/09/compare-secure-values.html

I started documenting things I do like this in my blog...if you can call it
a blog 8-)...

    -Mike


On 10/21/09 6:36 PM, "nate st.germain" <email@hidden> wrote:

> try using this utility:
>
> http://code.google.com/p/efipw/
>
> sudo efipw -p "" should set the pass to nothing.
>
> sudo efipw -d will decrypt it.
>
>
>
> On Oct 21, 2009, at 6:32 PM, Bob Henry wrote:
>
>> Can anyone direct me to a CLI solution to turning firmware
>> protection off on mac books?
>> I scraped this off my shoe:
>> /usr/local/bin/OFPW -pass mypassword
>> /usr/local/bin/OFPW -mode 1
>>
>> but seems that OFPW is a PPC util. Please advise TIA
>>
>> Bob Henry
>> IT & DATA
>> Wrangell Public Schools
>> 907-874-2321 x244
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Client-management mailing list      (Client-
>> email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>
>  _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Client-management mailing list      (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden

_________________________________________________
Michael Perbix
Lower Merion School District
Network Technician
http://bestsinceslicedbread.blogspot.com


 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Client-management mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

References: 
 >Re: disable firmware lock intel laptops (From: "nate st.germain" <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2011 Apple Inc. All rights reserved.