OS X Installers Downloaded Prior to February 14 No Longer Work After Certificate Update

Discussion in 'Mac Blog Discussion' started by MacRumors, Mar 3, 2016.

  1. N10248 macrumors 6502a

    N10248

    Joined:
    Jun 11, 2004
    Location:
    Essex, U.K.
  2. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #77
    It is like an OS X graveyard. :)
     
  3. KoolAid-Drink macrumors 65816

    Joined:
    Sep 18, 2013
    Location:
    California
    #78
    Wow! How do you run 10.0-10.5? Virtual machines?
     
  4. N10248 macrumors 6502a

    N10248

    Joined:
    Jun 11, 2004
    Location:
    Essex, U.K.
    #79
    I have 10.5 to 10.11 running on my 2008 Xserve on many partitions and the rest are install ISOs just in case I ever need to sort out an older Mac.
     
  5. Mr_Brightside_@ macrumors 68030

    Mr_Brightside_@

    Joined:
    Sep 23, 2005
    Location:
    Toronto
    #80
    Gorgeous.
     
  6. tennisproha macrumors 65816

    Joined:
    Jun 24, 2011
    Location:
    Texas
    #81
    We all have very little control over our lives, much less than we actually realize or admit.
     
  7. throAU, Mar 5, 2016
    Last edited: Mar 5, 2016

    throAU macrumors 603

    throAU

    Joined:
    Feb 13, 2012
    Location:
    Perth, Western Australia
    #82
    Recent versions of Windows do code-signing too.

    in fact just recently, Microsoft had a certificate SNAFU that was far worse:

    http://news.softpedia.com/news/serv...-ca-audit-data-from-its-partners-501357.shtml

    Essentially they lost the audit trail for a bunch of root certificates. Because they're a root CA they threatened via automated script to remove everybody's certificates. Because they had a system failure, lost data and didn't have a recent enough backup.

    What Apple did is standard operating procedure. What Microsoft just did most certainly is not.

    It would be nice if they provided a process for the end user to re-sign the installers, but that would mean anyone could tamper with them and re-sign them as well.
     
  8. tywebb13 macrumors 68020

    Joined:
    Apr 21, 2012
    #83
    This unfortunately is the final nail in the coffin for bootable dvd installers. Although apple dropped this with lion, it has been possible to make them since then. But they too will be inflicted by this problem. It will of course be possible to circumvent the problem with the date trick. But you shouldn't have to.

    The main advantage bootable usbs have had over dvds is that they boot much faster.

    But there is another advantage. The bootable usbs can be updated and the dvds can't. If you want dvds you will have to burn new ones.

    I've now made 5 new bootable usbs for the systems that now require it. That was painful - but manageable.

    But I REALLY hate having to recreate the dvds. Not sure I can contain my rage on that one. This may well be the last time I make them.
     
  9. gring40 macrumors newbie

    gring40

    Joined:
    May 16, 2015
    Location:
    IL
    #84
    That worked, and thanks so much for the tip. I'd prepared a flash drive to reload OSX on a new drive, got the error message, ran Terminal and entered the date command, and I was good to go. ☺️
     
  10. ReneR macrumors 6502

    Joined:
    Jun 18, 2008
    Location:
    Berlin, Germany
    #85
    Well, if I want to install an backed up OS copy and can't this is simply ****ed up.

    I could infinitely reinstalled Mac OS X 10.3, 10.4, 10.5 (just did last year on my upgraded Cube (1.2 GHz CPU and SSD, Radeon graphics ...) 10.6 etc. pp. And now just due to some stupid certificate expiration we need to download tons of GB again, which usually do not load on new Macs anymore. And who guarantees that you can reload an older release in a year or five? And why is there no "certificate warning box" to review the details and dismiss in case of - like for SSL certs in the browser?

    Well done and sophisticated UI and software design is something else, …
    --- Post Merged, Mar 6, 2016 ---
    And then a museum wants to restore it on an exhibition piece? Thanks god it appears you can tweak the date to work around it for now ;-/ !
     
  11. kyte macrumors newbie

    kyte

    Joined:
    Jan 15, 2008
    Location:
    Newcastle, AU
    #86
    Infuriating. I don't mind having a more secure system, its why I moved to OSX from Windows years ago. But seriously... like everyone else says... this is MY computer, and I should be able to download whichever OS I want. I just want to store the damn things so it does not matter one whit whether its currently compatible. Just makes me want to downgrade all the way to Snow Leopard (which is what my Macs came with). *GRUMBLE*
     
  12. Stridder44 macrumors 68040

    Stridder44

    Joined:
    Mar 24, 2003
    Location:
    California
    #87
    Then move.
     
  13. throAU macrumors 603

    throAU

    Joined:
    Feb 13, 2012
    Location:
    Perth, Western Australia
    #88
    Unfortunately the last 30-40 years of computing has proven that letting people run anything doesn't work. Because no computer user is in a position to audit the code they run before they run it to verify it is authentic, every single time they run it.

    The PC world allows for third party certificates to be used by installing your own certificates into the EFI/BIOS. Perhaps this is something apple should consider.

    But the number of users this affects is relatively small, and it opens up a potential problem where malware could potentially install its own certificate into the EFI, or trick the user into doing so.

    So unfortunately, this is a cost of having a secure platform these days - because the average user doesn't understand how to verify software and even those who do simply do not have the time to do so every time they execute something.
     
  14. 8692574 Suspended

    8692574

    Joined:
    Mar 18, 2006
    #89
    Are you saying that they are smart enought to create a new designed obsolescence but dumb enought to allow you can set the date back on computers?
     
  15. throAU macrumors 603

    throAU

    Joined:
    Feb 13, 2012
    Location:
    Perth, Western Australia
    #90
    You can also download an updated signed copy of the software.
     
  16. 8692574 Suspended

    8692574

    Joined:
    Mar 18, 2006
    #91
    I know I was pointing out that if they really wanted to create a planned obsolescence the first thing they would have looked at would be not allowing to set the date back...

    Of course they wouldn't have relased update installers either....
     
  17. Guy Clark Suspended

    Guy Clark

    Joined:
    Nov 28, 2013
    Location:
    London United Kingdom.
    #92
    This actually makes perfect sense. An up to date USB installer requires a minimal amount of updates post installation. An installer is easy to create. DiskMaker X takes the hard work out of it and v.5 is compatible with El Capitan. I've now updated USB installers for OS X Mavericks, Yosemite and El Capitan with this useful tool
    http://diskmakerx.com
    --- Post Merged, Mar 7, 2016 ---
    A veritable treasure trove of OS X releases. I only have images going back to OS X 10.5 Leopard. You never know when those old images may come in useful. One thing that is glaringly obvious is how much the OS X images have grown in size. OS X Tiger 2.74 GB to OS X Leopard the following release 7.63 GB. A massive bump.

    21.5" mid 2011 iMac running OS X El Capitan and Snow Leopard.
    --- Post Merged, Mar 7, 2016 ---
    OS X Leopard Server and OS X Snow Leopard Server will run in a virtual environment on Parallels Desktop 11
    http://kb.parallels.com/en/123276

    Wish I could find a way to run OS X Tiger in a virtual environment.
     
  18. n-evo macrumors 65816

    n-evo

    Joined:
    Aug 9, 2013
    Location:
    Amsterdam
    #93
    All those poor people finding themselves in the middle of the Sahara Desert and in desperate need to reinstall their Macs!
     
  19. s0nicpr0s macrumors regular

    s0nicpr0s

    Joined:
    Sep 1, 2010
    Location:
    Illinois
    #94
    I haven't verified this since I came across this. But the older installers I've created from the ESD files did seem to work on the last machine I restored Yosemite onto (2 weeks back). The USB I tried creating at the end of February however wouldn't work at all. Had to dig out the older ones I made last year. The one's I had attempted recently I tried building by hand with the terminal, and through DiskMaker X 5. It would complete building, but would refuse to install.

    Changing the date of the machine may allow the post-expiration built installers to work.
     
  20. throAU macrumors 603

    throAU

    Joined:
    Feb 13, 2012
    Location:
    Perth, Western Australia
    #95
    You don't need to go that far to get crap broadband.

    Or NO broadband.
     
  21. Ebenezum macrumors 6502a

    Joined:
    Mar 31, 2015
    #96
    That works in theory. In practice downloading installers every time Apple screws up with certificates isn't practical because not everyone has a fast internet. And even with relatively fast broadband downloading installers and updating installer media takes a long time.

    I hope Apple finally wakes up and creates a GUI option to create installer like DiskMaker X does. Memory stick is much faster and reliable than relying on internet recovery if one needs to reinstall OS X.
     
  22. n-evo macrumors 65816

    n-evo

    Joined:
    Aug 9, 2013
    Location:
    Amsterdam
    #97
    Sucks, but people just have to deal with the fact that you're going to need an internet connection sooner or later.
     
  23. zippyx17 macrumors newbie

    zippyx17

    Joined:
    Mar 7, 2016
    Location:
    Unknown
    #98
    Great! I have multiple backups of a friend's old backups fixed now. Gracias!
     
  24. JoeInMilwaukee macrumors member

    Joined:
    Apr 7, 2015
    Location:
    Milwaukee, WI
    #99
    Following up on my post, it took just under 12 hours for me to download Lion.
     
  25. ActionableMango macrumors G3

    ActionableMango

    Joined:
    Sep 21, 2010
    #100
    In my experience this means you did download it, and you have a local copy somewhere. I believe the default location is Applications (not Downloads). But it could be anywhere, so use Spotlight to find it and delete it. Then the download links are no longer greyed out and you can get a fresh copy.
     

Share This Page