"Startup Security Utility" is one of the most popular security features on a Mac, particularly for systems equipped with an Apple T2 security chip. The extra layer of protection it offers makes it a great addition. It's an excellent way to safeguard your Mac from malicious attacks and unauthorized access.

However, you can only access the Startup Security Utility from Recovery Mode. This article will explain what the Startup Security Utility is, and how to access and change its settings.

What is the Mac Startup Security Utility?

Are you curious about the Startup Security Utility on your Mac? The Startup Security Utility on a Mac equips the Apple T2 Security Chip, which provides protection against unauthorized access to your system. It ensures security through three distinctive features: Secure Boot, Firmware Password, and Allowed Startup Media.

Any Mac with a T2 security chip has the Startup Security Utility in Recovery Mode, which allows users to easily set their device's security preferences.

These are characteristics of –

  • Firmware Password: Without a firmware password, a Mac cannot be booted from any disk other than the one designated. It safeguards the system's physical integrity.
  • Secure Boot: This ensures that the operating system has been verified and is legitimate. There are three sub-options available.
  • Allowed Startup Disk: Users can now control whether a Mac is permitted to boot from an external or removable drive or media. This is an excellent way to control potential issues originating from external sources.

How do I access the macOS Startup Security Utility?

Want to access the Startup Security Utility on your Mac? Here's what you need to do:

1. Turn on your Mac. Hold down the Command(⌘)-R keys as soon as you see the Apple logo. Your device will start booting from macOS Recovery. If you can't get into Recovery Mode, try these fixes.

Step 2: Choose the user account you want to use. Type your administrator password, and you'll see the "Utilities" window.

Step 3: Select Utilities. From the menu bar, choose Utilities. Wait for it to open.

Startup Security Utility

Step 4: Enter your macOS authentication password. Then select the administrator account you want to use, and enter its password.

Now you can enable the firmware password, Secure Boot, and other features!

How do I change the settings for Startup Utility?

There are several ways to change the settings in Startup Security Utility for Mac.

To set a firmware password, follow these steps:

Step 1: On the Startup Security Utility screen, select the Firmware Password option.

Step 2: Click “Open Firmware Password Utility.”

Step 3: Next, enter your new password twice, then restart your Mac.

If you want to change the Secure Boot settings, click on one of the options. You have three options to choose from: Full Security, Medium Security, and No Security.

Full Security provides the highest level of security and is the default. If you choose this option, your Mac checks the status of the operating system on your startup disk to make sure it's legitimate and up to date. If the operating system can't be verified or information is missing, additional information is downloaded. If the operating system doesn't pass verification, you're prompted to update the software.

If you choose Moderate security, the restrictions aren't too severe. In this case, the Mac checks that the operating system is signed, but doesn't prevent the system from using it if verification fails. The user is warned to update the software.

If you choose the third option, “No security,” there is nothing to worry about. Nothing will be secure. There will be no authentication.

There are two options under "Allow booting from external or removable media:" "Prevent booting from external or removable media" and "Allow booting from external or removable media." If you select the first one, your Mac will not start up from an external volume. If someone tries, they'll see an alert.

Conclusion

The Startup Security Utility on your Mac is a great security feature that's available on Mac computers with an Apple T2 Security Chip. It offers three security options to enhance protection. These include Secure Boot, Firmware Password, and Allowed Startup Media.

You can easily access the Startup Security Utility and change the settings. Be sure to restart your system for the changes to take effect.

Frequently Asked Questions

It's a good idea to get familiar with the Startup Security Utility on your Mac, as it adds an extra layer of protection to your system. Read through the questions and answers below to increase your knowledge.

How do I exit the Startup Manager on a Mac?

To exit the Startup Security Utility on a Mac, you'll need to disable any options that you turned on. For example, if you set a firmware password, you'll need to turn it off. If you selected “ Highest Security ” for Secure Boot, click “No Security.”

How do I boot my Mac from an external disk?

You'll need to enter the Startup Security Utility to allow your Mac to use an external boot disk. There, go to the “Allowed Boot Media” section. You must click the “Allow booting from external or removable media” option.

How do I disable Secure Boot?

The easiest way to exit Safe Boot is to restart your device. Press and hold the Power button until you see the Apple logo. Tap it, then wait for your device to turn back on. It should boot up in normal mode automatically.