Startup Security Utility is a feature on Macs with the Apple T2 Security Chip. Setting up Startup Security Utility on your Mac helps secure the device against unauthorized access. It offers three main features:
1. Firmware password protection
2. Secure Boot and
3. The ability to set allowed boot media.
How to setup Startup Security Utility on Mac
To access Startup Security Utility,
- Turn on the Mac and press Command (⌘)-R immediately after the Apple logo appears.
- Select a user, enter the administrator password, choose Utilities > Startup Security Utility from the menu bar.
- Then authenticate with the administrator account password.
Setup Firmware Password
To set a firmware password,
- Click Turn On Firmware Password in Startup Security Utility.
- Then follow the onscreen instructions.
- This password prevents anyone from starting up from a disk other than the designated startup disk.
- It’s also possible to disallow booting from external or removable media.
Secure Boot
Secure Boot is that feature which ensures the Mac always starts up from a legitimate, trusted operating system.
- The default setting is Full Security, which offers the highest level of security. During startup, the Mac verifies the integrity of the operating system on the startup disk and downloads updated integrity information from Apple if needed. If the operating system doesn’t pass verification, the user is prompted to update or choose a different startup disk.
- Medium Security is another option that verifies the operating system on the startup disk by making sure it has been properly signed by Apple or Microsoft, but doesn’t require an internet connection or updated integrity information from Apple. If the operating system doesn’t pass verification, the user is prompted to choose a different startup disk or lower the security level.
So, that is how to setup Startup Security Utility on a Mac. It is a useful feature for Mac users with the Apple T2 Security Chip. It offers them firmware password protection, Secure Boot, and the ability to set allowed boot media. This helps to secure the device against unauthorized access.
