Security

• Security Chip Disabled
• Memory Protection -> Execution Prevention Enabled
• Virtualization -> Intel Virtualization Technology Enabled
• Virtualization -> Intel VT-d Feature Enabled
• Anti-Theft -> Computrace -> Current Setting Disabled
• Secure Boot -> Secure Boot Disabled
• Intel SGX -> Intel SGX Control Disabled
• Device Guard Disabled

Startup

• UEFI/Legacy Boot UEFI Only
• CSM Support No

Thunderbolt

• Thunderbolt BIOS Assist Mode Disabled
• Wake by Thunderbolt(TM) 3 Disabled
• Security Level User Authorization
• Support in Pre Boot Environment -> Thunderbolt(TM) device Enabled

Either add as a string or as a data ( HEX data (ProperTree) )

Format is lang-COUNTRY:keyboard

• 🇨🇳 | [252] en - ABC --> zh-Hans:252 --> 7A682D48 616E733A 323532
• 🇺🇸 | [0] en_US - U.S --> en-US:0 --> 656e2d55 533a30

etc.

AppleKeyboardLayouts.txt

1. Set Secure Boot to Setup Mode. Secure Boot should be reported as off by UEFI main tab
2. Create FAT32 formatted USB
3. Create EFI folder in the root of the newly formatted flash drive and move there content of SecureBoot/KeyTool
4. Boot flash drive via F12 boot menu
5. Choose Edit keys

6. Start by replacing Signature Database. Select .auth file

7. Do the same for Key Exchange Keys Database (KEK) and Platform Key (PK) in this order
8. Exit and shutdown your machine
9. Boot into the UEFI settings and check if Secure Boot is reported as on
10. Boot you favorite OS with Secure Boot enabled

More detailed information here

! Still quite experimental

• [x] Battery percentage
• [x] Bluetooth - Broadcom BCM1820A
• [x] Boot chime
• [x] Boot menu OpenCanopy
• [x] CPU power management / performance Now on par with Windows without XTU undervolt.
• [x] FireVault 2 No config.plist changes needed
• [x] GPU UHD 620 hardware acceleration / performance
• [x] HDMI Closed and opened lid. With audio.
• [x] iMessage, FaceTime, App Store, iTunes Store. Generate your own SMBIOS
• [x] Intel I219V Ethernet port
• [x] Keyboard Volume and brightness hotkeys. Another media keys with YogaSMC.
• [x] Microphone With keyboard switch using ThinkPad Assistant.
• [x] Realtek® ALC3287 ("ALC257") Audio
• [x] SD card reader Fortunately, USB connected.
• [x] Sidecar wired Works with 15,2 SMBIOS.
• [x] Sleep/Wake
• [x] TouchPad 1-5 fingers swipe works. Emulate force touch using longer and more voluminous touch.
• [x] TrackPoint Works perfectly. Just like on Windows or Linux.
• [x] USB Ports USB Map is different for devices with Windows Hello camera.
• [x] Web camera
• [x] Wifi - Broadcom BCM1820A
• [x] DRM Widevine, validated on Firefox 82. WhateverGreen's DRM is broken on Big Sur
• [x] Windows 11 boot from OC boot menu

• [ ] Fingerprint reader There is finally after many years working driver for Linux (python-validity), don't expect macOS driver any time soon.

• [ ] PM 981 Still unstable.

• [ ] Sidecar wireless If you want to use this feature, buy a compatible Broadcom card!

• [ ] Thunderbolt to DP Can't recognize 4k display, but is normal under windows booting via OC.