System Integrity Protection in Winclone 7 (or later)

For more help with System Integrity Protection or Secure Boot, visit our disambiguation page.

System Integrity Protection (SIP)

Beginning with OS X 10.11 and in all subsequent releases of macOS, Apple includes System Integrity Protection (SIP) with their operating system. SIP is a security feature that prevents anyone from altering the contents of files in key system folders; it is designed to protect system files from malware and viruses. SIP also affects third-party apps like Winclone that need to write to files that, since OS X 10.11, are under the protection of SIP.

If you are getting a message that the boot sector cannot be updated, or that SIP needs to be disabled, this article may help.

Disabling SIP is a quick and easy process that can be easily re-enabled after restoring the Winclone image.

Note: Saving/creating a Winclone image does not require disabling SIP.

How to Disable SIP

Disabling SIP requires booting into the recovery partition to run the Terminal command below.

To boot into the Recovery partition, hold Command-R while restarting the Mac.

From the Utilities Menu, select Terminal. On the Terminal command line, enter:

csrutil disable

…which will confirm the change with status message:

Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.

Reboot back into the macOS system partition.

To re-enable SIP, boot back into the recovery partition, open Terminal from the Utilities menu and set state to enabled:

csrutil enable

To re-enable SIP, run this command as root in Terminal:

/usr/bin/csrutil clear

Enter your system password, hit return, and the output should be:

Successfully cleared System Integrity Protection. Please restart the machine for the changes to take effect.

What if the “csrutil” command is not found? 

If the “csrutil disable” command fails when booted into the Recovery HD, there are two possible reasons:

1. There is no local Recovery HD and the Mac is booted from Internet Recovery
2. There is a local Recovery HD but it has not been updated to OS X 10.11 El Capitan.

First, confirm that there is a local Recovery HD on your Mac’s internal drive. Open Applications-> Utilities-> Terminal and enter:

diskutil list

You’ll be looking for the Recovery HD in the third partition, with ID disk0s3. If you don’t find Recovery HD in the list of partitions, the Recovery HD can be created using tools and instructions linked below.

https://github.com/MagerValp/Create-Recovery-Partition-Installer – Open Source project that creates a package to create and update the Recovery HD

http://bombich.com – Carbon Copy Cloner can create the Recovery HD

http://lifehacker.com/re-create-os-xs-recovery-partition-if-youve-removed-it-1585382425

For additional help, please contact support@twocanoes.com.