nbalonso.com

OS X Recovery Through Authenticated Proxy

| Comments

EDIT: I have not been able to use this method on a 10.9.0 or 10.9.1 recovery partition. The proxy authentication seems to work fine but Safari and the installation process just time out. Played a bit with the Keychain item permissions with no luck.

According to the article http://support.apple.com/kb/ht4718 using Recovery is not supported through proxy from the local Recovery System (pressing alt key and selecting the Recovery Partition) nor from the “pure” Internet Recovery (command+r on newer hardware).

Well as it turns out Apple does include the proxy functionality in the recovery partition environment but does not include the UI for it. So you can use the networksetup command and make the installer work through an authenticated proxy. Here is how you would do it.

  • Open a terminal window from the utilities menu
  • Run networksetup with the following syntax. All options are required. The on is included to specify that we need the authentication to be on
1
bash-3.2$ networksetup -setwebproxy <networkservice> <proxyserver> <port> on <username>

For example I would run

1
bash-3.2$ networksetup -setwebproxy Ethernet proxy.pretendco.com 80 on nbalonso
  • Then it prompts for the user’s password
  • The keychain pops up in the UI asking you to access the credentials. You accept providing no password, because the keychain has a blank password in the install environment.
  • Now you do the same thing for the https traffic
1
bash-3.2$ networksetup -setsecurewebproxy Ethernet proxy.pretendco.com 80 on nbalonso
  • It prompts for the user’s password once again
  • Quit terminal and continue installing as usual

PS: I have not tried to make the “pure” internet recovery work through an authenticated proxy. If you are going to try it check out the bless and nvram  commands and their options. I doubt you can make it work but who knows

Comments