Lesson 5: Use macOS Recovery Flashcards
• Access macOS Recovery utilities. • Manage Startup Security Utility. • Set a firmware password to secure macOS startup. • Manage Secure Boot and external boot options for Mac computers that have the Apple T2 Security Chip. • Reinstall macOS from macOS Recovery. • Create an external macOS Recovery disk.
Which utilities are available when you start up from macOS Recovery?
When you start up from macOS Recovery, you can access:
- Restore from Time Machine Backup
- Install / Reinstall macOS
- Get Help Online through Safari
- Disk Utility
- Startup Disk
- Startup Security Utility
- Terminal
With Terminal, you can run the resetpassword command to reset a password for a local account.
Additionally, for Mac computers with Apple silicon, you can use Share Disk to share files with another Mac that’s connected by a USB, USB-C, or Thunderbolt cable.
How do you start up from macOS Recovery on a Mac with Apple silicon?
If your Mac with Apple silicon is turned on, shut down your Mac.
Press and hold the power button until you see “Loading startup options.” A new screen appears that displays the available startup volumes and an Options icon.
Use the arrow keys, the mouse or trackpad to select Options, then press Return or click Continue.
What are the different macOS Recovery options and startup key combinations for Intel-based Mac computers?
For Intel-based Mac computers, macOS Recovery installs different versions of macOS depending on the startup key combination you use:
- Command-R: Installs the macOS that was installed on your Mac without upgrading to the latest version.
- Option-Command-R: Upgrades to the latest macOS that’s compatible with your Mac.
- Option-Shift-Command-R: Installs the macOS that came with your Mac or the version closest to it that’s still available.
What are three Startup Disk security policies for a Mac with Apple silicon?
The three Startup Disk security policies for a Mac with Apple silicon are:
- Full Security
- Reduced Security
- Permissive Security
Which tool should you use to set a firmware password for your Intel-based Mac?
You can use Startup Security Utility to set a firmware password for your Intel-based Mac.
Set a firmware password on your Mac
- Start up from macOS Recovery: Press and hold Command (⌘)-R immediately after turning on your Mac, and release the keys when you see the Apple logo or a spinning globe.
- When the utilities window appears, click Utilities in the menu bar, then choose Firmware Password Utility or Startup Security Utility. This utility is available only on Mac models that support use of a firmware password.
- Click Turn On Firmware Password.
- Enter a firmware password in the fields provided, then click Set Password. Remember this password.
- Quit the utility, then choose Apple menu > Restart.
How do you access Startup Security Utility?
Startup Security Utility is available only when you start from macOS Recovery.
From the Utilities menu, choose Startup Security Utility.
When are you asked to enter the firmware password when you set a firmware password for an Intel-based Mac?
You’ll see a prompt for a firmware password if you turn on your Intel-based Mac and press a modifier key or keys to change the way the Mac starts up, such as <kbd>T</kbd>, <kbd>D</kbd>, <kbd>Command-S</kbd>, <kbd>Command-R</kbd>, or <kbd>Option</kbd>.
The firmware password prompt appears after you restart or turn on your Mac and then immediately press and hold boot modifier keys like <kbd>Option</kbd> or <kbd>Command-R</kbd>.
(You release the keys when you see the Apple logo, a spinning globe, or the prompt for a firmware password.)
When does your Mac require you to enter an administrator password before you can access macOS Recovery?
If your Mac has FileVault or Activation Lock turned on, you must provide an administrator password before you can access macOS Recovery.
What are the default Startup Security Utility options for Secure Boot and Allowed Boot Media for an Intel-based Mac with the T2 Security Chip?
By default, for an Intel-based Mac with the Apple T2 Security Chip, Secure Boot is set to Full Security, and Allowed Boot Media is set to: “Disallow booting from external or removable media.”
See: Use Startup Security Utility to set secure boot options
What does the Secure Boot setting of Full Security provide to an Intel-based Mac with the T2 Security Chip?
For an Intel-based Mac with the Apple T2 Security Chip, the Full Security setting ensures that your Mac will start up only from operating systems that are trusted by Apple and are still being signed by Apple.
How can you create an external macOS installation disk?
You can create a macOS Recovery disk that includes the macOS Big Sur tools and installation assets with the createinstallmedia command-line tool in the macOS Installer app.
How do you revive or restore a Mac with Apple Silicon?
Use Apple Configurator 2 to revive or restore your Mac with Apple Silicon.
