Configure File System Protection
- Difficulty: Easy
- Time required: 5 min or less
- Extra devices: none
In order to recover lost data from your startup drive, Disk Drill requires read-only access. To grant this level of access on macOS 10.13 (High Sierra) and 10.14 (Mojave) you need to disable file system protection. This is part of the System Integrity Protection module (SIP or “rootless”) introduced in macOS El Capitan and substantially severed in High Sierra, Mojave. This is a purely temporary measure and can be accomplished with relative ease by anyone.
Note: Partially disabling SIP is absolutely safe! Once you are done with data recovery, you can re-enable it.
Step #1: Reboot your Mac
Click the menu on your Mac and select Restart.
Step #2: Boot into macOS Recovery Mode
Hold down Command + R on your keyboard immediately after your Mac begins to restart. Continue holding both keys until you see the Apple logo or a spinning globe. Startup is complete when you see the Utilities window.
Step #3: Run Terminal app
Next, click the Utilities menu and choose Terminal. The Terminal window will appear on your screen.
Step #4: Disable file system protection
Type the following command in Terminal and press Return:
csrutil enable --without fs
The system will respond with something like this:
Congratulations! You are almost done.
Final step: Back to Disk Drill
Now just reboot your Mac using the menu and choose the Reboot option. Once you are back to your desktop, feel free to run Disk Drill, and proceed with your data recovery as you normally would.
Check the success by typing ‘csrutil status’ in Terminal at any moment. You should see something like this:
System Integrity Protection status: enabled (Custom Configuration). Filesystem Protections: disabled
Alternatively, you can use Disk Drill’s Recovery Boot Drive to avoid using Terminal yourself, Disk Drill will then offer another tiny app, SIP Manage, that will run the needed commands itself in the background.
If you are concerned with your security while SIP is partially disabled, you may take your Mac offline by disconnecting from your wired or wireless network. Though it’s not that necessary, as your file system (the protection of which you just disabled temporarily) is not accessible to anything from outside of this computer.
We are aware of similar cases when users can’t access their internal drives even though their computers boot from external storage devices. When this happens, most probably your internal drive still happens to be under active protection of SIP (System Integrity Protection). This is exactly why you are reading this guide. Just disable SIP on your Mac for the time when you need to recover data from your internal drives. It’s simple and totally safe, you can re-enable it back after your files are recovered.
If your external drive is utilized as a storage for Time Machine backups, macOS Mojave (10.14) might be automatically protecting as part of SIP. Recently, we have posted a detailed note on this issue.
.updated: November 19, 2018 author: