Startup Security Utility

A macOS Recovery tool that configures security settings for the startup disk, including Secure Boot, external boot permissions, and firmware password on Apple Silicon Macs.

What to Know

Startup Security Utility controls fundamental security policies that govern how Macs boot and what software they trust during startup. Configuring these settings is essential for balancing security requirements with operational needs, such as allowing external boot for troubleshooting while maintaining Secure Boot for production use. For organizations with compliance requirements, Startup Security Utility settings determine whether Macs meet security baselines for protecting against bootkits and unauthorized OS modifications.

Common Scenarios

Enterprise IT: Corporate IT configures Startup Security Utility settings via MDM or manually to enforce Full Security mode with Secure Boot, preventing unauthorized OS modifications while still permitting necessary functionality like external boot for IT support purposes.

MSP: MSPs configure Startup Security settings on client Macs based on security requirements and operational needs, balancing protection against boot-level threats with the ability to perform external boot diagnostics when needed.

Education: School IT typically configures Startup Security to Full Security mode on faculty Macs handling student data, while potentially relaxing settings on lab Macs to permit external boot for rapid troubleshooting and reimaging.

In Addigy

Addigy can deploy Startup Security Utility settings via MDM on supported Macs, allowing centralized enforcement of Secure Boot policies, external boot permissions, and password requirements without requiring manual configuration on each device.