Contents/Resources/createinstallmedia -volume /Volumes/Installer -nointeraction Erasing disk: 0%. $ cd /Applications/Install \ macOS \ Monterey.app $ diskutil partitionDisk /dev/disk2 1 JHFS+ Installer 100%
To create a bootable USB installer, mount a USB drive, and erase and partition it, then use the createinstallmedia utility:
See Create a bootable installer for macOS, or run the utility without arguments to see how it works. Instead of booting from the network or using target disk mode, a bootable macOS installer can be made with the createinstallmedia utility included in Contents/Resources folder of the installer application bundle. $ codesign -dvv /Applications/Install \ macOS \ Monterey.app Executable=/Applications/Install macOS Monterey.app/Contents/MacOS/InstallAssistant_springboard Identifier= Format=app bundle with Mach-O universal (x86_64 arm64) CodeDirectory v=20400 size=641 flags=0x2000(library-validation) hashes=13+3 location=embedded Platform identifier=13 Signature size=4523 Authority=Software Signing Authority=Apple Code Signing Certification Authority Authority=Apple Root CA Signed Time=at 1:10:31 AM ist entries=32 TeamIdentifier=not set Sealed Resources version=2 rules=2 files=0 Internal requirements count=1 size=88 Creating a bootable USB installer To verify the code signature and integrity of macOS application bundles:
The macOS installation application is code signed, which should be verified to make sure you received a legitimate copy, using the pkgutil -check-signature or codesign -dvv commands. OS X Yosemite (10.10): Direct Link (HTTP).OS X El Capitan (10.11): Direct Link (HTTP).macOS Sierra (10.12): Direct Link (HTTP).Getting macOSĪpple's documentation provides details for getting older versions of macOS.
Packet capture of an unencrypted HTTP conversation during macOS recoveryĪn alternative way to install macOS is to first download the latest version of macOS ( Latest: macOS Monterey) from Apple via the App Store and create a custom installable system image.
However, this way exposes the serial number and other identifying information over the network in plain text, which may not be desired for privacy reasons. A system image can be downloaded and applied directly from Apple. The simplest way is to boot into Recovery Mode by holding Command and R keys at boot. Always prefer free and open source software ( which macOS is not). Care should be taken when installing new software.Ultimately, the security of a system can be reduced to its administrator.Verify backups work by testing them regularly, for example by accessing certain files or performing a hash based comparison.Always encrypt locally before copying backups to external media or the "cloud".Create regular backups of your data and be ready to format and re-install the operating system in case of compromise.This will mitigate damage in case of compromise and data theft.
In addition to full disk encryption, consider creating one or several encrypted partitions or volumes to store passwords, cryptographic keys, personal documents, etc.Subscribe to announcement mailing lists like Apple security-announce.Updates can also be downloaded directly from Apple's support site. macOS system updates can be completed using the App Store application, or the softwareupdate command-line utility - neither requires registering an Apple account.
This guide is provided on an 'as is' basis without any warranties of any kind. There is no one single technology, software, nor technique to guarantee perfect computer security a modern operating system and computer is very complex, and requires numerous incremental changes to meaningfully improve one's security and privacy posture. This guide is targeted to power users who wish to adopt enterprise-standard security, but is also suitable for novice users with an interest in improving their privacy and security on a Mac.Ī system is only as secure as its administrator is capable of making it. This guide is a collection of techniques for improving the security and privacy of a modern Apple Macintosh computer ("MacBook") running a recent version of macOS (formerly known as "OS X").