Welcome to Twocanoes Knowledge Base

The Twocanoes forum is the best place to find information about Winclone, Boot Runner, or any other software. Post a question or share information about Twocanoes Software products. We will attempt to answer any unanswered questions within 2-3 business days. If you need an answer more quickly, consider upgrading to Pro Support for 1 business day response time. Winclone can be upgraded to Winclone Pro right in the app.

If you have Winclone Pro, submit a request on the Pro Support page.

Our knowledge base has moved.


Boot Runner and System Integrity Protection

Boot Runner customers with Macs running Boot Camp should be aware of a potential issue when running Boot Runner on MacOS 10.12 Sierra and Mac OS X 10.11 El Capitan.

Apple has implemented System Integrity Protection:  To safeguard against disabling System Integrity Protection by modifying security configuration from another OS, the startup disk can no longer be set programmatically, such as by invoking the bless(8) command.

In order to allow selection of the Windows Boot Camp partition in the Boot Runner Selection Screen, System Integrity Protection (SIP) must first be disabled.

Systems running Boot Runner on Sierra or El Capitan with virtual machines only and no Boot Camp partition do not need to disable System Integrity Protection.

Follow the instructions below to disable SIP. 

System Integrity Protection (SIP)

Starting with OS X 10.11, Apple has implemented a new security feature, System Integrity Protection, which prevents even super users access to the System folder and non-volatile RAM.  

Disabling SIP requires booting into the recovery partition to run the Terminal command below.  

To boot into the Recovery partition, hold Command-R while restarting the Mac.  

From the Utilities Menu, select Terminal.  On the Terminal command line, enter:

csrutil disable

which will confirm the change with status message:

Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.

Reboot back into the El Capitan system partition.  

SIP must remain disabled for Boot Runner to successfully boot into Windows Boot Camp.


If you need to re-enable SIP, boot back into the recovery partition, open Terminal from the Utilities menu and set state to enabled:

# csrutil enable

Note: As of MacOS Sierra 10.12.2, it is possible to re-enable SIP from the Mac system rather than reboot into the Recovery HD.  To re-enable SIP, run this command as root in Terminal:

/usr/bin/csrutil clear

Entering your system password and hit enter and the output should be: 

Successfully cleared System Integrity Protection. Please restart the machine for the changes to take effect.

For additional help, please contact support@twocanoes.com.

Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request


Powered by Zendesk