Paragon SIP Management Utility

Some of our Mac products, such as Hard Disk Manager for Mac and Camptune, require disabling Apple SIP (System Integrity Protection) to work properly. To make the process of disabling SIP easier, Bootable Recovery Media features SIP Managenemt Utility.

The main difference from the previous SIP Management Utility is that now you can turn off only the SIP options you don’t need, without modifying unnecessary ones, to preserve system protection. For example, our product only requires one option disabled.

To manage SIP using the SIP Management Utility, boot your Mac from Recovery Media as described here: How To Boot Your Mac Using Bootable Recovery Media

Select “Paragon SIP Management Utility” in Utilities list and press Continue.

You will be presented with the following window:

By default, “Disable SIP to allow Camptune operations” is selected. You can also disable SIP entirely…

…or specify settings you would like to modify.

More info about the SIP options:

• Enable Filesystem Protection: System files can be modified only by system processes signed with Apple’s code signing identity. App processes should instead write to locations designated for third-party applications.
• Enable Kext Signing: Kernel extensions must be signed with a Developer ID for Signing Kexts certificate.
• Enable Debugging Restrictions: System binaries can be modified only by Apple Installer and Software Update from Apple-provided packages, and no longer permit runtime attachment or code injection.
• Enable DTrace Restrictions: DTrace cannot be used to inspect system processes, whether from the Instruments application or the dtrace command-line tool.
• Enable NVRAM Protections: Enables restrictionson changing system configuration settings stored in NVRAM.

You can also disable SIP manually. See this article for details.

Products for Mac OS X
Tags: macOS, SIP

Loading...