SecureBootModel in OpenCore

The SecureBootModel parameter in the OpenCore settings is responsible for simulating the Secure Boot security system supported by Apple at the firmware level. It determines which Secure Boot identifier will be used to boot macOS. This affects compatibility with different versions of macOS and the operation of system updates. SecureBootModel value options: Disabled: Secure Boot is disabled. Suitable for systems where you need to boot older versions of macOS (for example, High Sierra or Mojave). Can be useful for troubleshooting problems with incompatible hardware. Default: OpenCore automatically selects a Secure Boot model depending on the SystemProductName value (Mac model). Usually used for modern macOS (Big Sur and newer). Specific models (e.g. j137, j160, j185, etc.): Specifies a specific Secure Boot identifier corresponding to a specific Mac model. This can be useful for running macOS on hardware where you want to simulate a specific Mac model. Impact on macOS: Compatibility with System Integrity Protection (SIP): The level of system security may depend on Secure Boot being enabled. Some features require Secure Boot support. System updates: Enabling Secure Boot may be required to download and install macOS updates. Support for booting macOS Recovery and firmware: Secure Boot may be required to successfully boot Recovery Mode and firmware updates. Recommendations: For older systems (e.g. macOS Mojave), it is recommended to leave SecureBootModel = Disabled. For Big Sur, Monterey, or Sonoma, it is better to use Default to ensure that all features work correctly. If the system requires a specific Mac model for installation or operation, select the corresponding identifier manually.

Author:
[source]