You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

SIP can't be enabled after reinstalling High Sierra

I have tried using crsutil by booting into Recovery HD but the status remains disabled. I don't know why this happened. I don't have any anti-malware or anti-virus software installed, only use built-in gatekeeper. Someone has a solution for this?

MacBook Pro 13", macOS 10.13

Posted on Oct 24, 2019 2:43 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 24, 2019 3:45 PM

So, this was the solution:


  1. Enable SIP with custom configuration (something like: csrutil enable --without kext).
  2. Disable SIP (csrutil disable)
  3. Enable again (csrutil enable)
  4. Disable Kext Consent, for problematic High Sierra on specific machines (spctl kext-consent disable)


Now it works!


P.D: Had to restart two times because in the first one a crossed out circle appeared on the screen; I thought for a moment my hard drive had failed!

9 replies
Question marked as Top-ranking reply

Oct 24, 2019 3:45 PM in response to gdverde

So, this was the solution:


  1. Enable SIP with custom configuration (something like: csrutil enable --without kext).
  2. Disable SIP (csrutil disable)
  3. Enable again (csrutil enable)
  4. Disable Kext Consent, for problematic High Sierra on specific machines (spctl kext-consent disable)


Now it works!


P.D: Had to restart two times because in the first one a crossed out circle appeared on the screen; I thought for a moment my hard drive had failed!

Oct 24, 2019 3:03 PM in response to gdverde

Impatient, are we? This is a user-to-user help forum. No one has any requirement to answer a question in any allotted time, or at all.


When you enter Recovery Mode, I assume you're then launching Terminal to turn SIP back on? Are you entering:


csrutil enable


What does it say when you type that? It should say SIP has been enabled to confirm.

Oct 24, 2019 3:20 PM in response to Kurt Lang

At least someone cares, thanks. But that was exactly what I did before and it told me it had been enabled. Yet, it continues to be disabled (when going to terminal and using crsutil status). Apparently I'm not the only one with this problem in High Sierra. Others can't disabled it (in my case I can't enable it).


I'll try one more time and if it doesn't work I'll use Etrecheck.

SIP can't be enabled after reinstalling High Sierra

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.