When I was going to ReInstall a fresh copy of Catalina MacOS on my Macbook pro 2019 16 inch, unfortunately I deleted all partitions instead of erasing them. As my internet connection is so unstable as much as I repeated installing the OS from the net, it was failing with different errors usually related to the network errors or usually it says can't decode raw data.

I created a bootable media flash drive by these steps https://support.apple.com/en-au/HT201372.

Now when I want to boot the device from the USB drive, Choose startup disk

it says "Security settings do not allow this Mac to use an external startup disk". Security settings do not allow this Mac to use an external startup disk

I waned to allow my Mac booting from external media (as this link https://support.apple.com/en-au/HT208198) but It shows me the error: "Authentication Needed - You will need to authenticate as an Administrator to change the boot security settings."

ou will need to authenticate as an Administrator to change the boot security settings.

And when I click on Enter macOS Password I see this error : "Recovery is trying to change system settings. No administrator was found."

Recovery is trying to change system settings. No administrator was found.


  • I had never set a password for my mac T2 security
  • I had forgotten to sign out my apple id from the Macbook but I've removed my device from my apple account after that.
  • The Macbook doesn't have any operating system now, so I can't use solutions like rm /var/db/.AppleSetupDone

I've searched a lot and watched lots of youtube videos but didn't succeed anything yet. How can I fix my issue to allow me boot from the flash drive?

  • Sounds like you have a firmware password and you don’t remember choosing one? I’ll answer on the assumption that’s the dialog you have. – bmike Aug 2 at 12:49

You can try to run the installer on your USB directly in Recovery mode.

Open up terminal and enter: ls /volumes. Identify your USB, and then enter /volumes/<USB Name>/Install\ macOS\ Catalina.app/Contents/MacOS/InstallAssistant. The macOS installer should appear.

If it did not launch, you can copy your installation partition on the USB over to your internal drive. In Disk Utility, you can create a new partition on the internal drive and "restore" the USB drive to the new partition you just created. Then, select your internal installation partition as a boot drive and proceed to standard installation.

| improve this answer | |

I am going to guess you ended up with a firmware password and aren’t seeing the images here due to some removals of OS that the system expected.

If so, you will need to get Apple to unlock the device by providing original proof of purchase if you can’t recall and enter the passwords that were entered into the T2 / Secure Enclave. The T2 encrypts the storage with a device key and as you add admin accounts, their password and identity is asssociated with the key to unlock the storage so you would normally provide that admin password to retrieve the key to make a change. This doesn’t really need an admin user - just one authorized to perform the storage unlock and change the boot sequence. Typically that’s an admin since typically only one account is on a Mac out of the box.

The good news is your hardware is fully capable of internet boot, so I would try recovery from the internet to drop on macOS and see if you can unlock and configure things with a new OS from Apple being trusted and installed.

Supporting Macs at work, we override all three of the items in the KB you reference with Internet Recovery and an erase. For firmware passwords, unless we have an MDM unlock, we do go to Apple service for that just like consumers do in the end, but it’s rare we lose control of most devices in that manner. Hopefully you get a trusted install from the internet and can reinstall Catalina without using USB.

| improve this answer | |
  • Thanks @bmike, but I tried to install the OS from the net more than 5 times, it goes until it remains 4 minutes to finish the progress, and stops with error cannot decode raw data. – Ahmad Behzadi Aug 2 at 18:23
  • Also I never had set any password for T2, but I think it has used the admin user that previously was exist on my old deleted macOS. I Have that user's password but unfortunately it doesn't open any dialog to enter the password – Ahmad Behzadi Aug 2 at 18:24
  • What does Apple support say if you chat online with them, @AhmadBehzadi ? – bmike Aug 2 at 18:35
  • I hasn't received any response yet. (Email) Do they have online chat? – Ahmad Behzadi Aug 2 at 18:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .