Disabling SIP takes many forms depending on the version of macOS you are running. See this section of the OpenCore guide regrading disabling SIP.
# Disabling SIP
Partially disabling SIP so unsigned kexts can run and the OCLP patches can be used is listed as using csr-active-config = 03000000 - Disable kext signing (0x1) and filesystem protections (0x2). The car-active-config code I told you to use is a newer version using 03080000, instead of 03000000. You may need to use the older version as you are running Catalina.
An alternative to using amfi_get_out_of_my_way=1 or amfi=80 boot arguments is to use AMFIPass.kext. This is explained in the section of a guide I copied from
@miliuco's post over at Tonymacx86.
AMFI and AMFIpass.kext
AMFI (Apple Mobile File Integrity) was originally seen on iOS but migrated to macOS in 10.12 Sierra, possibly in 2012 when GateKeeper and digitally signed code were introduced. In short, it is a technology that blocks the execution of non signed code. It consists of 2 components:
- the /usr/libexec/amfid service run as root from /System/Library/LaunchDaemons/com.apple.MobileFileIntegrity.plist
- the extension /System/Library/Extensions/AppleMobileFileIntegrity.kext.
AMFI must be enabled to grant third-party applications access to privacy-relevant services and/or peripherals, such as external cameras and microphones. But, with SIP and/or AMFI disabled (a necessary condition to apply OCLP root patches) the dialog box to grant access to those applications is not shown to the user so those peripherals simply cannot be used in applications like Zoom or MS Teams, for example.
AMFI is usually enabled but it has already been seen that OCLP root patches require disabling AMFI and SIP in order to be applied. To avoid the problem of peripherals not working with third-party applications, the OCLP team has developed the AMFIPass.kext extension that allows AMFI to be enabled when the system must operate with AMFI and SIP disabled, such as when using OCLP or applying root patches. This fixes the permissions issue and OCLP can apply the patches as if AMFI were disabled.
If macOS has previously given permissions to these third-party applications and then AMFI and/or SIP is disabled, these permissions are transferred and the new system maintains them. But in a clean installation they do not exist. This is the main problem that AMFIPass.kext tries to solve. Being able to root patch OCLP with AMFI enabled is just a positive side effect.
In summary, when applying OCLP root patches you can act in 2 different ways:
- with boot argument amfi=0x80 without AMFIPass.kext. amfi=0x80 is a bitmask that disables AMFI completely. The value 0x80 is equivalent to AMFI_ALLOW_EVERYTHING
- with AMFIPass.kext removing amfi=0x80 and adding -amfipassbeta in boot args.
The -amfipassbeta boot argument is provided by AMFIPass.kext to override kernel version checking, so that the extension is loaded regardless of the macOS version. This way AMFIPass can work on macOS beta for which the extension does not yet have support.
I use AMFIPass.kext, removing amfi=0x80. If OCLP root patching fails due to this setting, I temporarily disable AMFI with the boot argument amfi=0x80, apply the patches, reboot, remove amfi=0x80, and reboot again.
(credits to 5T33Z0 for much of the explanatory text on AMFI and AMFIPass.kext).
The latest version of AMFIPass.kext v1.4.0 is attached below.
HD 6450:
I haven't used either of my HD6450 cards in a number of years. Not since I retired them when upgrading my old HP Microserver's from Sierra to Catalina. When I used these cards, I had an SSDT-HD6450.aml in my setup, which meant I didn't need WhateverGreen.kext. A copy of the SSDT is attached in .aml and .dsl format. So you can edit the SSDT to suit the IOName for the location of your HD 6450 card.
What OCLP will be doing is adding some old AMD kexts that Catalina doesn't contain, probably from the last High Sierra release. These are required to get the HD 6450 working in Catalina. The SSDT when edited to suit your setup should help with the correct workings for the card, as it was never a GPU that Apple ever used.
