eficheck failure with today's security update, Late 2015 5K iMac

[zorinlynx]

I got a "Your Mac may have a problem" message and looked into it. eficheck is failing after today's update to Mojave on my Mac. Anyone else seeing this? I want to know if it's a widespread issue or if something is hosed on my particular Mac.

bash-3.2# /usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check

EFI Version: IM171.88Z.F000.B00.1906171551 (Boot ROM Version: 170.0.0.0.0)

Matching allowlist not found in EFIAllowListShipping. Searching in EFIAllowListAll.

This system does now allow downloading background update data. Canceling.

Primary allowlist version match not found for version IM171.88Z.F000.B00.1906171551 (Boot ROM Version: 170.0.0.0.0).

 

[damaltor]

No problems here with the mojave update...
EFI Version: MBP114.88Z.F000.B00.1906140921 (Boot ROM Version: 194.0.0.0.0)
Primary allowlist version match found. No changes detected in primary hashes.

 

[chrfr]

I got a "Your Mac may have a problem" message and looked into it. eficheck is failing after today's update to Mojave on my Mac. Anyone else seeing this? I want to know if it's a widespread issue or if something is hosed on my particular Mac.

bash-3.2# /usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check

EFI Version: IM171.88Z.F000.B00.1906171551 (Boot ROM Version: 170.0.0.0.0)

Matching allowlist not found in EFIAllowListShipping. Searching in EFIAllowListAll.

This system does now allow downloading background update data. Canceling.

Primary allowlist version match not found for version IM171.88Z.F000.B00.1906171551 (Boot ROM Version: 170.0.0.0.0).

Do you have an aftermarket SSD installed in your computer? If you do, this will prevent firmware updates from installing, which can lead to the error above.

 

[George Dawes]

Got this too ? Should I be worried , it's all running ok as far as I can tell..

Upgraded from Sierra to Mojave ( mainly for security upgrades ) on late 2015 imac 27

 

[Brian33]

I also have a Late 2015 iMac 27". When I run the eficheck command, I get the same EFI Version number as the OP, but a "version match" IS found:

brian@imac:~(0)$ /usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check
EFI Version: IM171.88Z.F000.B00.1906171551  (Boot ROM Version: 170.0.0.0.0)
Primary allowlist version match found. No changes detected in primary hashes.

I'm a little fuzzy about how the efi check works, but I think it is checked against a list that is periodically downloaded if you have "Install system data files and security updates" enabled in System Preferences-->Software Update-->Advanced.

Got this too ? Should I be worried , it's all running ok as far as I can tell..

Perhaps your list is not current for some reason. If it were me I'd be bugged by it because I like things to be "right," but I wouldn't be overly worried about it.