[See end for update!]
Trying to get my 2013 MBA firmware updated from 433.120 to 433.140 as recommended by SilentKnight. I never had Big Sur on this system, went straight from Catalina to unsupported Monterey.
I understand you need to install the last supported OS for the computer (Big Sur) to get that update. I am on Monterey via OCLP and get this error:
Can't install an older OS...
The advice was to install the older OS onto an external drive, which I have ready to go.
Since it won't fly from within Monterey, am I looking at the USB install approach?
(Making bootable Big Sur flash drive...)
From the interwebs (eclecticlight.co):
"the only way to update the firmware in an Intel Mac is to install macOS or an update to it which contains that version of the firmware. You can perform that installation to an external disk which you never use again with that Mac, but that remains the one and only way."
"When Apple releases security updates for the non-current but supported versions of macOS, it normally includes firmware updates to bring all those Macs up to a common firmware version, which is currently [as of 3/21] 430.0.0.0.0 or later for the iMac14,2.
As Apple doesn’t normally release any such updates to earlier versions of macOS, Macs which are running those can’t get firmware updates either. They’re normally left with the last version which was current when they received their last security update.
For that to work, though, you must keep your Mac up to date with Apple’s security updates, of course."
*So what happens when we run current Security Updates to our patched systems?
>UPDATE: I did the latest Big Sur install from a flash drive onto an external SSD. Checked firmware while booted from SSD, 474.0.0.0.0! Booted back into OCLP version of Monterey, still 474. That was a cool trick!
So again, can I expect additional firmware upgrades going forward with OCLP-based Monterey and Ventura installs?
How does this Terminal result apply to an OCLP patched system?
_______________
/usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check
ReadBinaryFromKernel: No matching services found. Either this system is not supported by eficheck, or you need to re-load the kext
IntegrityCheck: couldn't get EFI contents from kext
________________
More fun reading:
The security research team at Duo known as Duo Labs has published a research paper on Apple’s EFI firmware security - learn more about their findings and recommendations, including a link to security tools developed to mitigate the risk. Get the full technical paper here.
duo.com
This article lists the firmware versions of Macs which have been successfully updated to run macOS 12.7.6. Apple doesn’t provide an official list of the current firmware versions which should…
eclecticlight.co