Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Status
The first post of this thread is a WikiPost and can be edited by anyone with the appropiate permissions. Your edits will be public.

DTRX

macrumors member
Jun 9, 2022
35
29
The potential problem with blocking 2 or 3 or the dozen or so domains in play is explained here:

Additionally, I looked at one of my system files and the domain for checks on my unit is valid.apple.com. Seems to be why those approaches fail for some.
I also did binary inspection of trustd: I agree that valid.apple.com is the most probable candidate if you wanted to rule out a single (sub)domain.

Still, blocking it and all others via hosts file did not lead to a working solution - at least in my case.
 
Last edited:

BabaGhanoush

macrumors newbie
Jun 9, 2022
2
0
I am not as tech savvy as you guys but I definitely do have the same issue with my GTX 1080. Anyway somebody can post a video using the most reliable method? Sorry for any noobyness :/
 

MacKing3000

macrumors newbie
Jun 8, 2022
29
4
I get it now. If you already have a webdriver installed, whichever version, and it just stopped working because of the revocation, you shouldn't need to reinstall if you just run the script but I suppose it is a different story when doing a general re-installation.
@Macschrauber @Dayo Ok.. so I used the automated scripts with the disabled SIP as per instructions .. I also upgraded to High Sierra 10.13.6 .. but I am unable to install Cuda.. or the MyWebDriver-387.10.10.10.40.140.pkg. .. would anyone know why this is happening.. When I try the package its saying I need to upgrade my High Sierra to 10.13.6 but that's the version I am already running.. I am also unsure if the Nvidia + Cuda drivers in High Sierra support the Pascal Titan X & 1080ti which I have been using ( were working ) w external power source, until things broke last week..
 

Attachments

  • Screen Shot 2022-06-10 at 2.08.13 pm.png
    Screen Shot 2022-06-10 at 2.08.13 pm.png
    133.4 KB · Views: 106
  • Screen Shot 2022-06-10 at 2.08.27 pm.png
    Screen Shot 2022-06-10 at 2.08.27 pm.png
    32.5 KB · Views: 75

startergo

macrumors 603
Sep 20, 2018
5,021
2,283
@Macschrauber @Dayo Ok.. so I used the automated scripts with the disabled SIP as per instructions .. I also upgraded to High Sierra 10.13.6 .. but I am unable to install Cuda.. or the MyWebDriver-387.10.10.10.40.140.pkg. .. would anyone know why this is happening.. When I try the package its saying I need to upgrade my High Sierra to 10.13.6 but that's the version I am already running.. I am also unsure if the Nvidia + Cuda drivers in High Sierra support the Pascal Titan X & 1080ti which I have been using ( were working ) w external power source, until things broke last week..
It is not only 10.13.6, but the other number should also match. There are many 10.13.6 versions.
 

Fullerfun

macrumors member
Jun 5, 2022
33
29
@Macschrauber @Dayo Ok.. so I used the automated scripts with the disabled SIP as per instructions .. I also upgraded to High Sierra 10.13.6 .. but I am unable to install Cuda.. or the MyWebDriver-387.10.10.10.40.140.pkg. .. would anyone know why this is happening.. When I try the package its saying I need to upgrade my High Sierra to 10.13.6 but that's the version I am already running.. I am also unsure if the Nvidia + Cuda drivers in High Sierra support the Pascal Titan X & 1080ti which I have been using ( were working ) w external power source, until things broke last week..
You need to install all the security updates for 10.13.6, that will upgrade you to the version that is compatible with .140
 

MacKing3000

macrumors newbie
Jun 8, 2022
29
4
Ok! So it Seems I've gotten the Drivers to work with the security 2020-06 updates.. One final question. It looks like the GPU is now working w Drivers only - Not asking for the CUDA install as per what SIERRA used to do ( needed to install drivers and matching coda separately ) .. is this correct? Or will it prompt an install of CUDA later.. I'm very happy if I don't have to and it just keeps working.. + Huge Thank you to everyone for getting everything working again!
 

Macschrauber

macrumors 68030
Dec 27, 2015
2,980
1,487
Germany
Rename the cuda driver package to match the Webdriver name and run the mod script over it.
Then start the modded cuda driver pkg.

I can make cuda driver mod script later or you edit it by opening the script with the script editor. Its just changing the name of the .pkg.
 
  • Like
Reactions: MacKing3000

kingAndy

macrumors newbie
Jun 8, 2022
4
1
Right,

It seems the answer is to simply completely disable all certificate revocation checks.
Not typically something recommended but I suppose it makes little difference when running HiSierra.

First, you need to boot into Safe Mode. This will enable a basic GPU driver that will, while not accelerated, allow you to operate your Mac. To do this, turn on or restart your Mac, then immediately press and hold the Shift key until you see the login window and log in to your Mac. You might be asked to log in a second time.

You can verify you are in Safe Mode as follows
  • Go to About This Mac >> System Report >> Software
  • In the System Software Overview, look at the value listed next to the item labeled Boot Mode.
    • Safe: The Mac is using safe mode.
    • Normal: The Mac is not using safe mode.

Once in Safe Mode, carry out the following steps:
  1. Download the web drivers in case you need to reinstall them
    • Only directly from the Nvidia website
    • If you do not have a usable backup from before 31 May 2022, download MacOS as well as you may need to reinstall
  2. Fully disconnect your Mac from the web
  3. Run sudo sh -c 'echo "0.0.0.0 ocsp.apple.com" >> /etc/hosts' && sudo sh -c 'echo "0.0.0.0 ocsp2.apple.com" >> /etc/hosts' && sudo killall -HUP mDNSResponder in Terminal
  4. Run crlrefresh rp && sudo rm -f /var/db/crls/* && sudo sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp;' (AKA Purge Command) in Terminal to purge the current cached Certificate Revocation List
    • Ignore any error messages on running the above
  5. Run sudo date -u 120200002021 && sudo reboot (AKA Date Command) in Terminal
  6. Reconnect to the web and you should be good
    • If not good, disconnect from the web, rerun the purge and date commands above (in that order) and then reinstall the drivers before reconnecting
      • You may want to go into Safe Mode first
      • Disregard any cert stripping steps you may have come across
    • If not good, disconnect from the web, rerun the purge and date commands above (in that order) and then restore a backup from before 31 May 2022 before reconnecting
      • If you do not have a usable backup from before 31 May 2022, install MacOS to a separate disk, migrate your data across using Migrate Assistant, then execute Steps 3 to 5 before reconnecting instead.
    • If still not good, rerun the purge and date commands above (in that order) and stay offline
      • You may want to go into Safe Mode

EDIT:
To revert the changes (if/when a proper fix is available), you will need to...
  1. Open Terminal, type sudo nano /private/etc/hosts and press "Enter"
    • I use Nano and forget what the default editor in Terminal is
    • If you don't have Nano, I think vim is most likely the default.
  2. Delete the ocsp lines; then save and close
  3. Run sudo killall -HUP mDNSResponder && sudo reboot in Terminal to refresh the DNS cache and reboot
Thank you! This worked for me in a way that Nvidia Drive Manager appeared back in System Pref (I uninstalled it a few days ago) but it only shows Nvidia GeForce GT 120 (which was working the whole time). It doesn't show my main graphics card Nvidia GTX 1080 8GB, 2560 CUDA Cores (PCI slot 4).
What to do?
Do i need to install some other driver?
Thank you for all the support and wisdom!
Screen Shot 2022-06-10 at 10.28.10.png
 

macguru9999

macrumors 6502a
Aug 9, 2006
817
387
The only nvidia cards that are supported by macos are the gtx 680 family (and those only up to Big Sur).....the others are not compatible anymore.
 
  • Like
Reactions: TheStork

Fullerfun

macrumors member
Jun 5, 2022
33
29
Thank you! This worked for me in a way that Nvidia Drive Manager appeared back in System Pref (I uninstalled it a few days ago) but it only shows Nvidia GeForce GT 120 (which was working the whole time). It doesn't show my main graphics card Nvidia GTX 1080 8GB, 2560 CUDA Cores (PCI slot 4).
What to do?
Do i need to install some other driver?
Thank you for all the support and wisdom!
View attachment 2017033
Hard to say for certain from the info you provided, but it sounds like you simply need to re-instal the NVidia web driver.
 

Fullerfun

macrumors member
Jun 5, 2022
33
29
What I said now applies to High Sierra as well, the drivers that previously worked do not work anymore...
This whole thread is about making the NVidia web drivers work for some specific NVidia cards. It’s not correct to say they don’t work anymore. These workarounds have worked for a lot of people, and I have made many systems work. A couple people have “reported” even getting a web driver directly from NVidia that doesn’t have the certificate issue. But also you are wrong. the web drivers still work perfectly well with Mac OS 10.10....and might with some other versions as well(I have only tested 10.10). There are also some NVidia cards that work natively without the need for the web driver(in which case they are still happily using their systems right now)...it’s highly complicated, but there are many guides on the internet explaining which cards are natively supported without the need for the web drivers...and of course it matters which version of the Mac OS you are running.....You have to research which card, which OS, what machine you are running....but in general...as you go above 10.13, extremely few NVidia cards work..all the way up to basically none.
 

NJFraser

macrumors newbie
Jun 9, 2022
2
1
I've been following this thread a while in hopes of finding a solution to this issue for own 5,1, and it seems like a solution is at hand. But it also sounds complex and it's no longer easy to suss out the concrete steps/scripts/etc needed. It would be extremely helpful if one of the folks whose got a firm grasp could consolidate the ABCs of this process and repost or even start a new thread and link it in this one....otherwise many of us will never get it fixed. Thanks for all your hard work people...
 
  • Like
Reactions: PopoBot

macguru9999

macrumors 6502a
Aug 9, 2006
817
387
This whole thread is about making the NVidia web drivers work for some specific NVidia cards. It’s not correct to say they don’t work anymore. These workarounds have worked for a lot of people, and I have made many systems work. A couple people have “reported” even getting a web driver directly from NVidia that doesn’t have the certificate issue. But also you are wrong. the web drivers still work perfectly well with Mac OS 10.10....and might with some other versions as well(I have only tested 10.10). There are also some NVidia cards that work natively without the need for the web driver(in which case they are still happily using their systems right now)...it’s highly complicated, but there are many guides on the internet explaining which cards are natively supported without the need for the web drivers...and of course it matters which version of the Mac OS you are running.....You have to research which card, which OS, what machine you are running....but in general...as you go above 10.13, extremely few NVidia cards work..all the way up to basically none.
Interesting but wrong in one point. The 680 gtx family of nvidia cards work natively and very well right up to and including osx 11 big sur. (but not monterey). These cards are fine for general use...
 
Last edited:

mirko.meschini

macrumors regular
Feb 13, 2011
116
5
Italy
I've been following this thread a while in hopes of finding a solution to this issue for own 5,1, and it seems like a solution is at hand. But it also sounds complex and it's no longer easy to suss out the concrete steps/scripts/etc needed. It would be extremely helpful if one of the folks whose got a firm grasp could consolidate the ABCs of this process and repost or even start a new thread and link it in this one....otherwise many of us will never get it fixed. Thanks for all your hard work people...
Basically if you have a bricked system, you have to boot in safe mode without graphics acceleration, then on terminal list all com.apple.trustd folders located in /private/var/folders/, remove content inside and block all com.apple.trustd folders with chflags command. Then delete content of /Library/Keychains/crls/ and /private/var/db/crls/, run crlrefresh rp and reboot. That's it.
Datalied commands are a few post ago, DRXT posted them.
 

Fullerfun

macrumors member
Jun 5, 2022
33
29
I've been following this thread a while in hopes of finding a solution to this issue for own 5,1, and it seems like a solution is at hand. But it also sounds complex and it's no longer easy to suss out the concrete steps/scripts/etc needed. It would be extremely helpful if one of the folks whose got a firm grasp could consolidate the ABCs of this process and repost or even start a new thread and link it in this one....otherwise many of us will never get it fixed. Thanks for all your hard work people...
You want to press the easy button and not spend any time reading.

try Dayo’s solution on page 4, eierfrucht’s on page 10, or Dayo’s latest, which he just posted only a couple posts above yours.
 
  • Like
Reactions: TheStork

mirko.meschini

macrumors regular
Feb 13, 2011
116
5
Italy
Interesting but wrong in one point. The gtx family of nvidia cards work natively and very well right up to and including osx 11 big sur. (but not monterey). These cards are fine for general use...
Nvidia cards that work without needing webdrivers, are the same that work on later releases of macos (from Mojave to Big Sur), and are basically Kepler based cards: GT or GTX 6xx, GT or GTX 7xx, with the exeption of GTX750Ti that's a Maxwell based card. Cards that require webdrivers and are NOT compatible with Mojave-BigSur are Maxwell and Pascal based cards, so GT or GTX 9xx 10xx and GTX750Ti.
 

Fullerfun

macrumors member
Jun 5, 2022
33
29
Interesting but wrong in one point. The gtx family of nvidia cards work natively and very well right up to and including osx 11 big sur. (but not monterey). These cards are fine for general use...
I never mentioned any specific cards for an explicit reason, it’s not so straightforward. You have to do your homework. Luckily there are lots of guides.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.