
OpenCore 0.6.3 allows you to work around CFG lock by giving you these values AppleXcpmCfgLock and AppleCpuPmCfgLock in Kernel > Quirks. However, the community seem to think this might cause instability issues so you might want to disable this CFG Lock in your BIOS and set those values to false
I used the following guides to help me disable CFG lock on my Dell T7810. There is no one guide that works on this machine so I had to get all my clues from multiple guides
First, I looked at this Dortania guidehttps://Dortania.github.io/OpenCore-Post-Install/misc/msr-lock.html
However, it hints that it doesnt work on Dell, it provides a link to a guide for Dell called dreamwhite’s guide
https://github.com/dreamwhite/bios-extraction-guide/tree/master/Dell
Finally I used some clue from this Reddit post as well
https://www.reddit.com/r/Hackintosh/comments/hz2rtm/cfg_lockunlocking_alternative_method/
So far, we have 3 places: Dortania, dreamwhite, and Reddit
At a high level, you need to do these 2 steps in order to disable your CFG Lock:
- Get the memory location of the value that points to CFG Lock in your BIOS
- Change that value from enabled to disabled
You need to know these 2 steps at high level to make this work. It allows you to fill in the gap if my instruction is missing something.
For example: I dont cover installing python here but as long as you know where you are at in the high level overview, you should not get lost.
Get the memory location of the value that points to CFG Lock in your BIOS
I used the dreamwhite’s guide but I ran into an issue at the very first step there. When I run this command in Ubuntu, I get some kind of error about DOCTYPE. Like it could not parse some html file
python3 Dell_PFS_Extract.py <BIOS_UPGRADE.EXE>
I realize now that I can use that python script in Windows and Mac Success fully. I can also extract the exe file in Windows using an app called 7-Zip
Once extracted, theres a bunch of files, one of them should have a name that tells you its modifying System BIOS. In my case, mine is named 1- 1 System BIOS vA.27.bin
. I know its important because its 8MB while the other files are smaller. (One other file is 9MB but it has something to do with Intel Management Engine so its not relevant)
All the 3 guides above say you need to run UEFITool, so download and run that. Open the .bin file I referenced above.
Go to menu Action > Search
All other guides say to search for “CFG Lock” but for our BIOS, we will search for “MSR Lock”. For me, I got something like this:
Unicode text "MSR Lock" in Compressed section/PE32 image section at header-offset 76B18h
Double click on that string, it should expand the structure of the BIOS. It should tell you that string is located under … Platform > Compressed section > PE32 image section
Right click on “PE32 image section”, then select “extract as is”. Now I get a file named Section_PE32_image_Platform_Platform.sct
In the dreamwhite’s guide, theres a link to a script called IRExtractor. Open that app, load the sct file. Then click on extract. You should get a .txt file
Open that text file, search for “MSR Lock” again, you will get something like this
0x36DC8 One Of: MSR Lock Control, VarStoreInfo (VarOffset/VarName): 0x72, VarStore: 0x1, QuestionId: 0xBF9, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 7B 11 7C 11 F9 0B 01 00 72 00 10 10 00 01 00}
0x36DD9 One Of Option: Disable, Value (8 bit): 0x0 (default MFG) {09 07 41 0A 20 00 00}
0x36DE0 One Of Option: Enable, Value (8 bit): 0x1 (default) {09 07 40 0A 10 00 01}
Note the VarOffset
value of 0x72
Change the CFG lock value from enabled to disabled
The Reddit guide I referenced above points me to a script called RU.efi
Format a small USB drive as FAT32, you can use Rufus on Windows or Disk Utility on MacOS. Create a folder named “EFI”. In the “EFI” folder, create a folder named “BOOT”. Paste the “RU.efi” file into the “BOOT” folder
Boot into the USB drive, you should get a screen like this
Press “ALT” and “=” to get to this screen
Hit the down arrow key until you find IntelSetup
. Note, other guides might say CPUSetup
. Hit ENTER
Now, my offset value is 0x72, yours might be different. To locate this value, i navigate to 0070 for the 7 part of 0x72. Then I go to 02 for the 2 part of 0x72
Change value 1 (enabled) to 0 (disabled).
Press Ctrl + W to save
Press Alt + Q to quit
Now you can boot into MacOS with AppleXcpmCfgLock and AppleCpuPmCfgLock to false
Note if you reset your BIOS setting, this value will be reset as well

You are literally a life saver.
ReplyDeleteI love helping my community.
Delete