How to firmware lock Mac Pro so not possibility to boot anyway

How to set a firmware password on your Mac

A firmware password prevents starting up from any internal or external storage device other than the startup disk you've selected.

To protect the data on your Mac, you can set a user account password (login password) to prevent unauthorized users from logging in to your user account. You can also encrypt your startup disk using FileVault, so that only users who can log in to your Mac can read the data on that disk.

For even more protection, you can set a firmware password. A firmware password prevents users who don't have the password from starting up from any disk other than your designated startup disk. As a result, it also blocks the ability to use most startup key combinations.

How to set a firmware password

These steps apply to OS X Mountain Lion or later:

Start up from macOS Recovery by holding down Command (⌘)-R immediately after turning on your Mac. Release the keys when you see the Apple logo.

When the utilities window appears, choose Utilities > Firmware Password Utility from the menu bar. On iMac Pro, choose Startup Security Utility instead.

This utility is available only on Mac models that support use of a firmware password.

Click Turn On Firmware Password.

Enter a firmware password in the fields provided, then click Set Password. Remember this password.

Quit the utility, then choose Apple () menu > Restart.

Your Mac asks for the firmware password only when attempting to start up from a storage device other than the one selected in Startup Disk preferences, or when starting up from macOS Recovery. Enter the firmware password when you see the lock icon and password field:

To turn off your firmware password, repeat the steps above, but click Turn Off Firmware Password in step 3.

How to set a firmware passcode for one-time use

You can also use the Lost Mode feature of Find My Mac to remotely lock your Mac with a firmware passcode for one-time use. Your Mac receives the lock instruction from iCloud, restarts, and asks for the system lock PIN code you created. When you enter that passcode, the Mac starts up from your designated startup disk and disables the passcode.

Lost Mode works even while using a firmware password. Unlike the passcode set by Lost Mode, a firmware password remains on until you turn it off with Firmware Password Utility.

If you forgot your firmware password

If you can't remember your firmware password or passcode, schedule an in-person service appointment with an Apple Store or Apple Authorized Service Provider. Bring your Mac to the a appointment, and bring your original receipt or invoice as proof of purchase.

Published Date: Dec 18, 2017