Boot modes for a Mac with Apple silicon

macOS

From a shutdown state, press and release the power button.

1. Boot ROM hands off to LLB.

2. LLB loads system-paired firmware and the LocalPolicy for the selected macOS.

3. LLB locks an indication into the Boot Progress Register (BPR) that it’s booting into macOS, and hands off to iBoot.

4. iBoot loads the macOS-paired firmware, the static trust cache, the device tree, and the Boot Kernel Collection.

5. If the LocalPolicy allows it, iBoot loads the Auxiliary Kernel Collection (AuxKC) of third-party kexts.

6. If the LocalPolicy didn’t disable it, iBoot verifies the root signature hash for the signed system volume (SSV).

Paired recoveryOS

From a shutdown state, press and hold the power button.

1. Boot ROM hands off to LLB.

2. LLB loads system-paired firmware and the LocalPolicy for the recoveryOS.

3. LLB locks an indication into the Boot Progress Register that it’s booting into paired recoveryOS, and hands off to iBoot for paired recoveryOS.

4. iBoot loads the macOS-paired firmware, the trust cache, the device tree, and the Boot Kernel Collection.

5. If paired recoveryOS boot fails, booting into fallback recoveryOS is attempted.

Fallback recoveryOS

From a shutdown state, double-press and hold the power button.

1. Boot ROM hands off to LLB.

2. LLB loads system-paired firmware and the LocalPolicy for the recoveryOS.

3. LLB locks an indication into the Boot Progress Register that it’s booting into paired recoveryOS, and hands off to iBoot for recoveryOS.

4. iBoot loads the macOS-paired firmware, the trust cache, the device tree, and the Boot Kernel Collection.

Safe mode

Boot into recoveryOS per the above, then hold Shift while selecting the startup volume.

1. Boots to recoveryOS as per the above.

2. Holding the Shift key while selecting a volume causes the BootPicker app to approve that macOS for booting, as normal; it also sets an nvram variable that tells iBoot to not load the AuxKC on the next boot.

3. System restarts and boots to the targeted volume, but iBoot doesn’t load AuxKC.