T2 / Secure Boot and imaging internal SSD with macOS

[unglued]

Hi all,
I’m planning to wipe my new 2018 MBP SSD and install a fresh image as soon as I receive it. I will sign into the machine first and download Mojave to create an external boot drive to use to image the machine and to also keep for future use.

My understanding is that Secure Boot defaults are set to Full Security and booting from external media is not allowed. Therefore, I will boot into Recovery mode and set a Secure Boot admin password, disable Secure Boot, and enable allow booting from external media.

Is there anything else to do or check?

Thank you for your help.

 

[chrfr]

Hi all,
I’m planning to wipe my new 2018 MBP SSD and install a fresh image as soon as I receive it.

There is absolutely no need to do this. Just set it up and install your software.

 

[maflynn]

My understanding is that Secure Boot defaults are set to Full Security and booting from external media is not allowed.

Correct

I’m planning to wipe my new 2018 MBP SSD and install a fresh image as soon as I receive it.

As noted by @chrfr There is no need for such an action. Back in the day when Apple gave us install choices, it made sense since you could customize the install to your needs, now what you install, will be the exact same thing that you will have when you open the box and turn it on for the first time.

 

[unglued]

Sorry I should have mentioned I do this to all my new devices for several reasons. I don’t trust or know exactly what’s installed (think China) and I want to know the steps and obstacles to help family and friends with issues.

Aren’t there other apps installed out of the box like GarageBand, Numbers, Pages, etc? Which I don’t need.

 

[_Kiki_]

Sorry I should have mentioned I do this to all my new devices for several reasons. I don’t trust or know exactly what’s installed (think China) and I want to know the steps and obstacles to help family and friends with issues.

Aren’t there other apps installed out of the box like GarageBand, Numbers, Pages, etc? Which I don’t need.

if you don't trust, why you bought a laptop manufactured in China ?

 

[unglued]

Good question, probably similar reason why I don’t buy American cars...piece of junk and prefer Japanese cars but I make sure they are manufactured in Japan and not U.S.. Apple products are great and stable but I don’t have a choice where they are manufactured so I need to compensate if that makes sense

But actually it doesn’t matter where the laptop was manufactured I still don’t know what was done to it and prefer to wipe it clean for peace of mind, it’s not difficult to do so.