Updated: 10 August 2026
An OpenCore configuration file (config.plist) controls every phase of the macOS boot chain, from ACPI table injection and driver loading to NVRAM variables, security policies, and SMBIOS machine identification. This reference provides an in-depth review of each master section in config.plist.
1. Core Sections of config.plist
| Section | Primary Responsibility | Critical Keys & Considerations |
|---|---|---|
| ACPI | Injects compiled SSDT patches and applies binary ACPI patches. | Add, Delete, Patch, Quirks -> FadtEnableReset, NormalizeHeaders |
| Booter | Configures early UEFI memory mapping and bootloader execution quirks. | Quirks -> DevirtualiseMmio, EnableWriteUnprotector, RebuildAppleMemoryMap, SyncRuntimePermissions |
| DeviceProperties | Injects PCI device properties (iGPU framebuffers, audio layout-id, Ethernet built-in flag). | PciRoot(0x0)/Pci(0x2,0x0) (iGPU), PciRoot(0x0)/Pci(0x1f,0x3) (Audio) |
| Kernel | Manages kext injection order, kernel patches, and CPU power quirks. | Add (Lilu, VirtualSMC first), Quirks -> AppleCpuPmCfgLock, AppleXcpmCfgLock, PanicNoKextDump |
| Misc | Controls the boot picker GUI, timeout, security policy, and logging. | Boot -> PickerMode (External/Builtin), Security -> Vault (Optional), ScanPolicy (0), SecureBootModel (Default) |
| NVRAM | Declares default NVRAM variables and boot arguments. | 7C436110-AB2A-4BBB-A880-FE41995C9F82 -> boot-args (-v keepsyms=1 debug=0x100 agdpmod=pikera) |
| PlatformInfo | Defines SMBIOS machine model, unique serial numbers, MLB, and UUID. | Generic -> SystemProductName, SystemSerialNumber, MLB, SystemUUID |
| UEFI | Loads UEFI runtime drivers and configures graphical output. | Drivers (OpenRuntime.efi, OpenCanopy.efi, ResetNvramEntry.efi), Quirks -> ProvideConsoleGop |
2. SMBIOS Model Selection Principles
- Desktop Intel with iGPU Only (10th Gen): Use
iMac20,1oriMac20,2. - Desktop Intel with dGPU (10th, 12th, 13th, 14th Gen) / AMD Ryzen: Use
MacPro7,1oriMacPro1,1(disables expected iGPU power management). - Laptops: Use
MacBookPro15,2(8th Gen),MacBookPro16,2(10th Gen Ice Lake), orMacBookPro16,3(10th Gen Comet Lake).
3. Security and SIP Recommendations
For production stability and maximum security, configure the following keys in Misc -> Security:
Vault: Set toOptional(allows modifying config without signing).SecureBootModel: Set toDefault(enables Apple Secure Boot matching your SMBIOS).DmgLoading: Set toSigned.ScanPolicy: Set to0(allows scanning all storage devices).
Reliable Starting Points
- OpenCore Official Configuration.pdf — The complete specification manual.
- Dortania OpenCore Guide — Standardized step-by-step configuration.
He
ReplyDelete