Frequently Asked Question

How do I disable secure boot and enable external boot in recovery mode?
Last Updated 6 months ago

Some of our customers have reached out, saying that they are experiencing trouble getting their bootable USB to boot. Below are some of the common fixes that may resolve your situation.

1. Which drive are you using?

RECON ITR and IMAGER used to come as two separate drives, one for the bootable version (IMAGER) and one for the Live version (ITR). But, newer versions of RECON IMAGER have migrated both applications to the same SSD drive (T7). Make sure you are using the updated version of IMAGER to ensure all system integrity updates have been installed, which means you should only be using the Samsung T7 Portable SSD drive.

2. Have you disabled the Startup Security?

Macs with T2 Security Chips require you to disable startup security if you want to boot to external media. Check if the Mac you are trying to boot has a T2-chip or Apple Silicon chip (M1, M2, M3) by looking at the model number and checking the release date against the list below:

  • iMac introduced in 2020 and later
  • All iMac Pro
  • Mac Pro introduced in 2019 and later
  • Mac Mini introduced in 2018 and later
  • MacBook Air introduced in 2018 and later
  • MacBook Pro introduced in 2018 and later

If you are attempting to boot RECON IMAGER on any of these devices you must enter recovery mode and disable secure boot. Below outlines how to disable Startup Security.

Note: When performing any action to disable or enable features from MacOS Recovery Mode on a target system, always make note of the existing settings and options. You will want to return the system to its previous settings when finished imaging the device.

Once you have an admin account password you can make these changes by following these steps:

  1. Boot into the device's native Recovery Mode. This can be done in one of two ways:
    1. For MacOS devices with an Intel Processor (i3, i5, i7, i9): Power off the device. After pressing the power button, hold down the Command + R keys while the device is booting.
    2. For MacOS devices with an Apple Silicon Processor (m1, m2, m3): Power off the device. Press and hold down the Power button while booting until the message "Loading startup options..." displays. Then, select "Options" from the list.
  2. Once logged in to Recovery Mode with the admin password, from the top-level menu select Utilities > Startup Security Utility. (The System will prompt you for the admin password again.)
  3. In the "Startup Security Utility" window, you can enable external booting by:
    1. For MacOS devices with an Intel Processor (i3, i5, i7, i9):
      1. Select the "No Security" option to allow bootable media to not need to connect to the internet to connect with Apple's signing servers.
      2. Select the "Allow booting from external devices/drives" option to allow booting from your USB or portable SSD drive.
    2. For MacOS devices with an Apple Silicon Processor (m1, m2, m3):
      1. Select the internal hard drive and click the "Security Policy..." button
      2. Select the "Permissive Security" option to enable booting from an external drive without needing to connect to the internet to verify with Apple. (It can also be helpful to check both checkbox options to avoid needing to come back to check them later if necessary.)

3. Is your RECON IMAGER fully updated?

SUMURI regularly updates RECON IMAGER to ensure examiners have the most up-to-date and stable tool around. Please check the Sumuri Updates Page to see if there are updates available for your RECON ITR/IMAGER.

If you need help with updating your drive, instructions can be found in Section 15 of the RECON IMAGER Manual.

Please Wait!

Please wait... it will take a second!