> ## Documentation Index
> Fetch the complete documentation index at: https://docs.macstadium.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How do I disable SIP on my Mac?

> Request a System Integrity Protection (SIP) change or a reimage on a MacStadium-hosted Mac: what to put in the ticket, how to share credentials safely, and what downtime to expect.

Open a support ticket and MacStadium makes the change for you. You can't disable System Integrity Protection (SIP) yourself on a hosted Mac, because it can only be changed from recoveryOS, which needs local console access to the Mac. SIP changes are part of the [Remote Hands service](https://docs.macstadium.com/macstadium/support/remote-hands-service.md).

## Request a SIP change

**1. Open a ticket**

[Open a ticket](https://docs.macstadium.com/macstadium/support/service-desk-guide.md#open-a-ticket-for-a-specific-mac) in the MacStadium portal. If you need the change on several Macs, list all of them in one ticket.

**2. Include an admin account for each Mac**

On Apple silicon, recoveryOS asks for an administrator account before it allows the change. Include the admin username and password for each Mac, and select the **sensitive information** checkbox so the credentials are never sent by email.

> [!WARNING]
>
> Don't paste passwords into chat or email. Use the ticket's **sensitive information** checkbox, and change the password after the work is done.

**3. Say what you need**

Say whether you want SIP disabled or re-enabled. If you're disabling it to load a kernel extension, say so in the ticket.

## What to expect

* **Downtime.** MacStadium shuts down the Mac and starts it in recoveryOS to make the change, so the Mac goes offline and SSH and Screen Sharing disconnect until it restarts. Save your work and stop any jobs on the Mac first.
* **Timing.** The change itself takes a few minutes once a technician starts on the ticket.
* **Security policy.** On Apple silicon, disabling SIP also lowers the Mac's startup security policy.

To check the current setting, run `csrutil status` in Terminal on the Mac.

## Reimage a Mac

You can also request a reimage, which erases the Mac and installs a clean copy of macOS. List every Mac in one ticket and say which macOS version you want.

> [!WARNING]
>
> A reimage erases everything on the Mac. Back up anything you need first.

A reimage takes longer than a SIP change: about 20 minutes to erase and 30 minutes to reinstall, depending on the macOS version and how many Macs are in the request. Plan for each Mac to be offline for at least an hour from when the work starts.

## Orka VMs

This page is for MacStadium-hosted Macs. For Orka virtual machines, use an image with SIP already disabled. See [SIP-disabled images in orka-images](https://github.com/macstadium/orka-images/tree/main?tab=readme-ov-file#sip-disabled).


## Related topics

- [How do I find the hardware serial number for my service?](https://docs.macstadium.com/iaas/iaas-faqs/how-do-i-find-the-hardware-serial-number-for-my-service.md)
- [Disabling Activation Lock and Find My on Mac](https://docs.macstadium.com/iaas/bare-metal-macs/2018-mac-mini-deactivation-process.md)
- [MacStadium Remote Hands hardware support](https://docs.macstadium.com/macstadium/support/remote-hands-service.md)
- [How do I order multiple servers at one time?](https://docs.macstadium.com/iaas/iaas-faqs/how-do-i-order-multiple-servers-at-one-time.md)
- [AI agent integration with the Orka CLI](https://docs.macstadium.com/orka/orka-devops-integrations/claude-code.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.