0

I have a DBAN CD )used with an external optical drive) which I have used in the past on multiple old Macs. I tried to use it on a 2018 Macbook Pro and DBAN could not be booted. Specifically, I tried holding down the "c" key and I could hear the CD spin a lot but then the normal OS booted. I tried booting while holding down "Option" but DBAN wasn't in the list of bootable options. I tried booting into Recovery and selecting the DBAN CD as the startup disk but I can't choose it (I see the DBAN CD but when I choose it I receive a message that the startup disk can't be used because "the bless tool was unable to set the current boot disk"). Again, if I open Terminal in Recovery Mode and try to bless the CD then it fails.

I wanted to know if this was a problem unique to one Mac so I tested the same CD in an old Macbook Pro (I think 2014 or 2015) and a different 2018 Macbook Pro. The CD is bootable normally in the old one and not in that second new one I tested.

Did Apple make a firmware change in newer systems that could have this effect?

Improve this question
1
  • What version of DBAN are you using? The logical problem is that the OS lacks drivers for the new hardware, but I'd rather be precise in attempting an answer if you have some details.
    – bmike ♦
    Commented Nov 27, 2018 at 22:26

3 Answers 3

Reset to default
1

T2 chip in newer Macs needs to recognize the boot media to allow it to start from that disk. You might be able to tell the system to use the drive as a startup volume if you can log in first with sufficient privileges (Preferences --> Startup Disk). Workaround? Boot to recovery partition, open Disk Utility, and do a secure wipe of the drive, using highest stringency options. Accomplishes the same thing (7 pass U.S. Department of Defense 5220-22-M compliant wipe) without the need to run DBAN. Also leaves the machine in a recoverable state so that the next user can install from the recovery partition, which is far faster than Internet Recovery (and in some cases, DBAN wipes the recovery partition, which makes reinstalling incredibly painful depending on the machine - I spent several days repairing an old Air after our IT folks used a DBAN equivalent to wipe it - even worse, this happened AFTER I had already run a full wipe from disk utility - the DBAN wipe wasn't even needed at that point!)

Improve this answer
4
  • Can you temporarily disable secure boot to fix the problem?
    – Wowfunhappy
    Commented Nov 27, 2018 at 22:02
  • Appears to be possible: support.apple.com/en-us/HT208330
    – dr.nixon
    Commented Nov 27, 2018 at 22:06
  • @dr.nixon Disabling secure boot and allowing boot from external media each failed to fix the problem.
    – MasterOfNone
    Commented Dec 5, 2018 at 13:15
  • Also @dr.nixon In some cases security constraints may require that the recovery partition be wiped.
    – MasterOfNone
    Commented Dec 5, 2018 at 13:16
1

It should be possible to boot the Mac with the same disk as used previously. However, on the 2018 MacBook Pro you'll need to first disable Secure Boot using the Startup Security Utility. You'll need to set Secure Boot to "No Security".

Please note that the internal SSD will not be available to DBAN to use. You'll only be able to wipe external drives.

This is really not a problem in this specific use case. The other answers to your question here that recommends that you use for example Disk Utility to do a 7 pass wipe - they are actually incorrect. In the modern day of SSDs (which all T2 equipped Macs have), you will actually not be sufficiently protected by simply doing a 7 pass wipe. This is due to the nature of SSDs.

In order to really secure wipe the drive, you'll also need to let the T2 chip "forget" the encryption keys for the drive, and set new keys. You can manage encryption keys from the File Vault part of System Preferences.

Improve this answer
2
  • With Secure Boot set to "No security" DBAN still failed to boot. An Ubuntu live DVD could be booted and, as you described, failed to see the internal SSD. In my case I needed to wipe the drive, not merely forget existing encryption keys, so your idea there was not tested. I came close to marking your answer correct but dr.nixon's answer was also good and I chose it.
    – MasterOfNone
    Commented Dec 5, 2018 at 13:21
  • @MasterOfNone I think you're taking the wrong decision with wiping. Please understand that wiping is NOT the most secure option. The most secure option is to delete the encryption keys. Wiping a SSD will NOT ensure that everything is deleted - that only works on ordinary hard disk drives.
    – jksoegaard
    Commented Dec 5, 2018 at 14:29
0

You can get a bless tool from here, which happens to be made by the same person who makes macOS cracks. Try blessing the cd with that tool, it should work (I think)

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .