Oct 26, 2017  Download Java for OS X 2017-001 Java for macOS 2017-001 installs the legacy Java 6 runtime for macOS 10.13 High Sierra, macOS 10.12 Sierra, macOS 10.11 El Capitan, macOS 10.10 Yosemite, macOS 10.9 Mavericks, macOS 10.8 Mountain Lion, and macOS 10.7 Lion. May 06, 2018  About the security content of Security Update 2018-001 Swift 4.1.1 for Ubuntu 14.04 This document describes the security content of Security Update 2018-001.

25 Mar 2020

macOS version 10.13.0, called 'High Sierra,' was released on 2017-09-25. It is a free update to 10.12 Sierra. An update page with an installer link is at https://support.apple.com/en-us/HT208969 . This note describes how to update a computer from an older version of macOS to OS X 10.13 High Sierra.

Apple released MacOS 10.13 Supplemental Update on 05 Oct 2017, fixing a security bug.
Apple released MacOS 10.13.1 on 31 Oct 2017, fixing security bugs including the KRACK vulnerability.
Apple released Security Update 2017-001 v10.13 on 29 Nov 2017, fixing the 'root login' bug.
Apple released Security Update 2017-001 v10.13.1 on 29 Nov 2017, fixing the 'root login' bug. That fix broke file sharing between Macs; Apple has documented a fix to the fix, and re-released Security Update 2017-001 v10.13.1 with the fix.
Apple released MacOS 10.13.2 on 06 Dec 2017, fixing the 'root login' bug again, as well as other security problems.
Apple released macOS High Sierra 10.13.2 Supplemental Update on 08 Jan 2018, to mitigate the effects of the 'Spectre' bug.
Apple released MacOS 10.13.3 on 23 Jan 2018, fixing a few bugs.
Apple released macOS High Sierra 10.13.3 Supplemental Update on 20 Feb 2018 fixing the Telugu crasher bug.
Apple released macOS High Sierra 10.13.4 on 29 Mar 2018, fixing a few bugs. Problems with multi-monitor configurations have been reported.
Apple released macOS Security Update 2018-001 on 24 Apr 2018, fixing three security bugs.
Apple released macOS High Sierra 10.13.5 on 01 Jun 2018, fixing a few bugs.
Apple released >macOS High Sierra 10.13.6 on 09 Jul 2018, fixing security bugs and updating device firmware.
Apple released Security Update 2018-002 for High Sierra on 30 Oct 2018, fixing security bugs.
Apple released Security Update 2018-003 for High Sierra on 05 Dec 2018, fixing security bugs.
Apple released Security Update 2019-001 for High Sierra on 22 Jan 2019, fixing security bugs.
Apple released Security Update 2019-002 for High Sierra on 29 Mar 2019, fixing security bugs.
Apple released Security Update 2019-003 for High Sierra on 13 May 2019, fixing security bugs.
Apple released Security Update 2019-004 for High Sierra on 22 Jul 2019, fixing security bugs.
Apple released Security Update 2019-005 for High Sierra on 26 Sep 2019, fixing a serious security bug.
Apple released Security Update 2019-006 for High Sierra on 29 Oct 2019, fixing serious security bugs.
Apple released Security Update 2019-007 for High Sierra on 11 Dec 2019, fixing serious security bugs.
Apple released Security Update 2020-001 for High Sierra on 28 Jan 2020, fixing serious security bugs.
Apple released Security Update 2020-002 for High Sierra on 24 Mar 2020, fixing serious security bugs.

I installed High Sierra on three computers. Two have moved on to Mojave; my Mac Mini is so old that it is stuck on High Sierra.

The latest version of Mac OS X is version 10.15, 'Catalina', released in 07 Oct 2019.

New Features of High Sierra

There is a new file system, called APFS. Installing High Sierra will reformat your storage if your machine has an SSD. This new file system has caused problems with some applications.

New graphic and video formats are supported, which will make smaller files.

Mail, Photos, Siri, and Safari have new interface features.

Should I Install High Sierra?

• If your computer is working now, there is no urgent need to change your OS, until you want the new features, or continuing security updates.
• Apple usually supports the current version and the previous version. Using an unsupported OS will still work, but if security problems are found in an unsupported version, Apple usually does not patch them.
• Eventually, companies will write software that requires features of the latest Apple OS, and someday you may want to buy and use some of that software.
• If your current Macintosh fails and you have to buy a new one, you'll end up migrating to High Sierra whether you were ready or not. This happened to me.

Show Stoppers

Check MacInTouch for the latest status.

Installation Problems

Some users whose disk is encrypted with FileVault report that their attempt to install will not accept their unlock password. (Thanks to Marv Schaefer for this tip.)
Another friend attempted to install High Sierra and ended up in a panic/reboot loop. It took many hours of Internet recovery to complete installation.

Users who have Fusion drives are having problems installing the system. APFS support is apparently incomplete.

A MacInTouch reader reported problems upgrading; when they finally got High Sierra installed, all their mail messages were missing, and application license data was lost.

Some users report that their attempt to install fails with the message 'macOS could not be installed on your computer' halfway through. Make sure you clone your hard disk before you start installing. Some users had trouble installing the Supplemental Update.

Migration Problems

I bought a new computer for a family member. The machine came with High Sierra. I used Migration Assistant to move files and settings from the old computer that was running El Capitan. Multiple problems ensued.

• Trying to open some Adobe programs popped up an alert window that I needed to install the Legacy version of Java -- as expected. I clicked the 'More Info' button, which took me to a download page, and downloaded the software. Trying to open the .dmg file resulted in the alert 'the file is damaged and will not open.' I had to use Terminal to execute the command cd ~/Downloads; sudo xattr -d -r com.apple.quarantine *.dmg. Then I could open files and install Java.
• It turned out that many files were marked with the 'quarantine' xattr and would not open. Subsequent file downloads and newly created files were all marked 'quarantine.' I finally did defaults write com.apple.LaunchServices LSQuarantine -bool NO to prevent further nonsense. Apple support was no help. They suggested rebooting, zapping the PRAM and resetting the SMC. I did more investigation and found that it's not the presence of the 'quarantine' xattr, but rather the specific bits in its value; deleting the quarantine attributes was not necessary. I have not figured out whether the wrong bits were on in the attribute, or if the quarantine checkeer was alarming incorrectly. For the moment I have left LSQuarantine turned off.
• Several people in the MacInTouch forums suggested: do not use Migration Assistant to transfer applications.
• iTunes would not work. It failed with the message 'The folder 'iTunes' is on a locked disk or you do not have write permissions for this folder.' Turned out that the iTunes folder on the old machine was located in /Users/Shared/Music and linked from iTunes. Migration changed the permissions on the iTunes folder when it copied it. I copied the folder to ~/Music and did chown -r user:staff * and that fixed it.
• Opening Adobe Acrobat Pro X I after migration popped up a window advertising Acrobat Pro DC with buttons 'Buy Now', 'License this software', and 'Continue trial'. Look for an 'Advanced' button that you can click and then UNCHECK 'remove old versions' so the sneaky installer doesn't delete your working Acrobat. Acrobat XI Pro seems to work, but there is a notice that there will be no more support.
• When I was setting up the new machine, my Brother B+W printer added easily. My Brother color printer did not: it added as a generic PCL printer. I visited the Brother website, hunted down my printer, downloaded the driver image, and installed it. Then I added the printer in ► System Preferences... Print&Scan, and it worked OK.

Apple software

Users reported that Mail.app randomly loses settings. A few users reported persistent Finder freezes.

Third party apps

Quicken 2007 will not make backup files on an APFS volume.

Illustrator and Photoshop have problems reported on High Sierra. If you have Creative Cloud, update to the latest CC versions and check for updated plugins. I migrated my CS5 versions to High Sierra, and they sort of work: can't use Suitcase with them any more, and some Illustrator features I never use are known to cause immediate crashes.

Some 32-bit applications will work under 10.13 but this is the last macOS to support them 'without problems.'

Installed MS Office 2016. Many things are different.

What you Should Do Now to Get Ready for High Sierra

• Use ► App Store...%[marrow]%Updates to keep all Apple software up to date, including the OS.
• Apply all free updates to other software you use.
• Set up an external hard drive and use Time Machine.
• Add more RAM if you can.
• Fix damaged and duplicate fonts.
• If you are running a version of Mac OS X earlier than Snow Leopard, you will have to install Snow Leopard first. You can buy an installer disc for Snow Leopard from Apple's web site for $20.

Who Can Update

Not everyone can use the new OS version.

• Only fairly new Macs can run High Sierra. See the list online at the Apple web site that specifies what Mac models can run High Sierra. If your computer does not meet these requirements, stick with the latest Mac OS X you can run.
• You need at least 2GB of memory, preferably more.
• If you depend on PowerPC programs, the latest version of OS X that you can run is Snow Leopard, since Lion, Mountain Lion, Mavericks, Yosemite, El Capitan, Sierra, and High Sierra do not support Rosetta, the PowerPC emulator. See the Frequently Asked Questions section about High Sierra. In particular, pre-Lion Quicken, Microsoft Office 2004, and some features of Adobe CS3 will not run on High Sierra. (See Adobe article.) Stick with OS X 10.6.8a until you upgrade these applications. You could install VirtualBox (free) on your Mac, and install 10.6 into a virtual machine, and update it to 10.6.8a, and run your PowerPC programs under the emulated OS. I tried this, and it worked.
• If you depend on the Classic environment to run Mac OS 9 programs from the 1990s, stick with OS X 10.4.
• If you have a Mac with a PowerPC processor, High Sierra won't work on it. Stick with OS X 10.5.8.
• You can't install High Sierra over an ancient version of OS X: Apple's license terms specify that High Sierra is only for Macs that have Lion, Mountain Lion, Snow Leopard, Mavericks, Yosemite, El Capitan, or Sierra installed, and the installer enforces this restriction.
• Old printers and scanners may not work if the manufacturer has not updated the driver software. Those with PowerPC or 32-bit drivers will not work.

Plan your install

When you decide to install High Sierra, do it carefully. You may find that there are issues that affect you: do your homework. Check MacInTouch to see if there are problems with macOS 10.13 that affect you.

Make sure you back up your entire disk before starting to install High Sierra. Preferably to more than one place.

Make a list of the hardware you depend on, and search the web to check that each device will work. Older printers and scanners can have issues.

Leave yourself enough time. Upgrading will tie up your computer for a big part of a day. Installing takes an hour or two, but then your computer will be very slow until it re-does the Spotlight index and does a big backup up to Time Machine.

Particular issues before upgrading

Here is a partial list of minimum program versions needed for High Sierra. For other programs, check product websites, or RoaringApps.

Currently, Adobe says that Illustrator and Photoshop CC do not work on High Sierra and they will fix them in a future version.

Adobe no longer sells regular application versions of Photoshop and Illustrator. Instead they rent you a Creative Cloud subscription. Stop paying, the apps stop working. They tell you that one advantage is that you'll get bug fixes and new features whenever they decide to release them. (There are a lot of tricky deals, initial teasers, different bundles. You could pay $20/app/mo or $600/yr for all CC apps. Adobe also sells Photoshop Elements as a non-cloud application for $70 one-time.)

Similar deal for Adobe Acrobat.. Acrobat Pro DC rents for $179/yr, for 2 users. (Acrobat XI Pro may still work on High Sierra.) You might be able to buy a lifetime copy for $449, but websites don't say how many computers are covered. If you search the web for replacement products, there are some listed. PC World suggests Nitro Pro 11, $160 lifetime for up to 10 users.

There are alternatives to Adobe products, such as much less expensive Affinity Photo and Affinity Designer. There are also free programs such as Polarr Photo Editor and GIMP. With any of these replacements, you have to learn how to use new programs, and worry about compatibility.

Microsoft wants to rent you 'Office 365.' (Again there are multiple deals: for about $70/yr/computer you can get the whole suite. You can also buy non-cloud Office 2016 Home & Student for $150 one-time. This is what I did.)

Quicken 2007 (Lion update) sort of works on High Sierra; won't make a backup to an APFS volume. Since this is 32-bit software, it won't run on the macOS scheduled for 2019. Quicken wants to rent you Quicken 2018 for Mac for $35/yr. This is a show stopper for me.

• Programs that will not be upgraded: Some device drivers: check with your device manufacturers. The free software CUPS drivers may work for some printers. Gutenprint was marked as incompatible.
• Peripherals: Make sure your printers and scanners will be supported. Some manufacturers don't release updated drivers for their printers for months after a new OS X release.

Installing High Sierra

I updated a 2012 Mac Mini to High Sierra. Since the Mini does not have an SSD, the update did not install APFS. This install took about 3 hours.. it would have taken additional time to change the file system. Then I had to install High Sierra 10.13.4 and update various Apple software: this took 3 more hours.

1. Clean up and update software before installing.
   • (If your Mac is running a very old version of OS X, you must install Snow Leopard 10.6.8 first, in order to get a version of Apple App Store that can download High Sierra. Here is Apple's how to upgrade page.)
   • Download High Sierra from ► App Store...=>Updates. It is free. This downloads a large file, the High Sierra Installer, to your disk. You can create a bootable installer volume on a USB key using these instructions. (But see the TidBits article 'Previously Downloaded OS X Installers No Longer Work'.) Apple's license terms say you can update all your computers with one purchase.
   • Get the applications on your computer ready for 10.13: apply the latest fixes.
   • Delete junk files. Carefully.
   • Delete Safari, iTunes, and Firefox caches, so your backup will be faster.
   • If you have customized your desktop background or screensaver, write down your settings. Some Apple-provided pictures may not be available in the next version.. make a safe copy of anything you will want after upgrading.
   • Empty the Trash.
   • Clean up damaged and duplicate fonts.
   • If you use Apache, save a copy of /etc/apache2/httpd.conf.
   • If you installed modules via CPAN, Macports, or Fink, make a list of them. In a Terminal window, type
     perldoc perllocal | grep :: > cpan_modules.txt
     port -qv installed > macports_packages.txt
   • Have your software license keys handy in case you have to re-authorize products.
   • De-authorize Adobe Photoshop and Illustrator.
   • De-authorize your computer from iTunes.
2. Backup and prepare.
   • If you use MySQL, backup the database with mysqldump databasename > db.sql
   • BACK UP YOUR HARD DRIVE to an external disk. I used SuperDuper to clone my whole drive. Some cautious people make two backups.
   • If you installed a third-party Solid State Disk (SSD), check the manufacturer's website to see if you need to update its firmware to work with High Sierra.
   • If you are using an anti-virus product, disable it. Some anti-malware programs see the utility that converts HFS to APFS as malware, and prevent it from running. Since most anti-virus software is tightly integrated with the operating system, you may have to install a High Sierra-specific version of your software after installing High Sierra anyway.
   • If you connect your Mac to the network using WiFi, select ► System Preferences...=>Network=>Advanced and delete any WiFi networks you don't want to use. (I forgot to do this, and my computer connected to a very slow network, which slowed down my install.)
   • The best way to handle Macports is to uninstall all the old ports and reinstall after updating the OS. In a Terminal window, type
     sudo port -fp uninstall installed
3. Install
   • If you use a wireless mouse or keyboard, put in fresh batteries.
   • Set screen saver to NEVER, and turn off Time Machine.
   • Dismount and unplug or power off external drives.
   • Run the macOS 10.13 installer. If FileVault is enabled on your computer, the installer will ask for a password to unlock the disk. It will run for about 15 minutes, then reboot, then run for about an hour, then reboot again. (The 'time remaining' will show wildly varying estimates as the installer proceeds. Don't panic if you see a gray screen with '30 minutes remaining' for an hour. Just let it run.)
   • As the update finishes, it will ask you for your AppleID password.
   • If High Sierra asks you if you want to enable Desktop and Documents folder syncing to iCloud, the safest thing to do is to say NO. If you say YES, these folders will be backed up in iCloud and available on all devices, which you may not want, and saying YES may also enable 'Optimize Storage' which will delete files from your computer's drive if it gets too full. Adam Engst's TidBITS article on Optimized Storage is very helpful.
   • Select ► App Store... to update to latest versions of Apple software, then run it again to make sure all software is updated. (about another hour) If you just downloaded the OSX installer from the Apple Store, you will have the latest version of OSX, but this step may find additional application updates.
   • Do a 'smoke test' to verify that your computer is working OK. Make sure the applications you depend on are still working. Try out the applications from Apple that were updated with the OS. If you have trouble, restore your backup and go back to the old OS version.
4. Recover
   • When you attempt to re-authorize Adobe Photoshop and Illustrator, or the first time you execute them, you may see an alert box that tells you that you have to install Java 6 first (even if you have Java 8 installed). Click 'more Info' and download and install the update. See above for a gotcha regarding the 'quarantine' switch.
   • Re-authorize your computer in iTunes.
   • Wait for Spotlight to finish indexing (may take several hours). Performance will suck till it finishes.
   • Turn on Time Machine and start your backup.
   • You don't have to repair disk permissions with Disk Utility any more. In fact, you can't; the option is gone.
   • Restart the computer. Often this speeds things up.

Post Install Tasks

Once you are satisfied that your computer works acceptably, and you are going to stay on High Sierra, you can make some adjustments.

• If your computer seems slow or buggy, try zapping the PRAM.
• If you have purchased applications that are OS version specific, like Cocktail, buy updates and install them.
• Clean your font caches by issuing the Terminal command sudo atsutil databases -remove and restarting.
• If FileVault was on, it will be on after upgrading. Check to make sure. In Fact, check all the System Preferences. Once in a while something is changed by an update.
• In ► System Preferences...%[marrow]%Software Update%[marrow]%Advanced, do not check 'Install app updates from the App Store.' Decide whether to install updates individually. I accidentally installed an Xcode update for Catalina that broke my ability to build for Mojave. It is probably best not to install any updates automatically.

Customization

You will probably want to set up per-user customizations, such as your desktop background and screensaver. After each new OS generation this is something of an adventure; functions get renamed and moved around.

• I really hate the CAPS LOCK key, so I disable it. In High Sierra, this is done by opening ► System Preferences...=>Keyboard=>Keyboard=>Modifier Keys and changing the action for CAPS LOCK to 'No Action.' (I had set this on Yosemite and it was carried over by the upgrade process... works for High Sierra too.)
• In ► System Preferences...=>Keyboard=>Trackpad, I uncheck 'Scroll Direction: natural' .. it seems UNnatural to me after 30 years. (I had set this on Yosemite and it was carried over by the upgrade process... works for High Sierra too.)
• I disable or silence most Notifications.

Security issues

Under High Sierra, Spotlight 'shows suggestions from the Internet, iTunes, App Store, movie showtimes, locations nearby, and more.' To do this, it sends your location and query to Apple servers. You may wish to change this if you are required to keep some information private. Change it in two places: uncheck 'allow Spotlight Suggestions' in ► System Preferences...=>Spotlight=>Search Results and uncheck 'Safari & Spotlight Suggestions' in ► System Preferences...=>Security&Privacy=>Privacy=>Location Services=>Privacy=>System Services=>Details.

Some kinds of security certificates are no longer accepted. These are the ones using SHA-1, which is deprecated.

Devices

• Check that your printers work. If your printer will not work, you may be able to get it working by selecting ► System Preferences...=>Print&Scan, deleting the printer and adding the printer again: for some printers, this will trigger running ► App Store...=>Updates to get new printer software. For other printers, you will have to download the correct printer driver from the manufacturer's web site.
• If you have a scanner, plug it in and power it on. Mine worked fine. If the scanner appears in ► System Preferences...=>Print&Scan, remove it, and add it again. For some scanners, this will invoke ► App Store...=>Updates to add a driver that will let you operate the scanner with Image Capture. For other scanners, you will have to download the correct scanner driver from the manufacturer's web site. If manufacturer-supplied software is not available, and Image Capture does not provide enough features, you may be able to get it working by purchasing and installing VueScan.

Programming Tools

1. In Terminal, type the command java. If you don't have Java 8 installed, this action will bring up a dialog box: click More Info to bring up the Oracle JDK installation page in a web browser, and trigger the installation of the Java 8 JDK from Oracle over the Internet. Java is needed for Eclipse and for other Mac applications, such as OpenOffice and some Adobe products, and VPN clients such as Cisco. Java is not dangerous, if you use it to run code you trust: using it to run web page animations has had some problems.
2. If you use your computer for programming, install the (free) Xcode Developer Tools by typing xcode-select --install in a terminal window, or by installing the whole Xcode package using the App Store. Then type sudo xcodebuild -license in a terminal window to accept the license.
3. MacPorts: see my instructions for MacPorts page. Basically the procedure is to list your ports and uninstall them before upgrade, install the OS, reinstall MacPorts, and reinstall your ports. Set PERL5LIB=/Users/myname/bin:/opt/local/lib/perl5/site_perl/5.26 or installs will fail with messages about variants.
4. MySQL:Version 8.0.1 appears to work on Sierra and High Sierra.
5. Perl/CPAN: Perl 5.26.2 is installed by MacPorts. See my instructions for CPAN.
6. Apache web server:
   • Apache 2.4.28 is provided with High Sierra, but is not automatically started and there is no System Preferences interface to enable it.
   • The new OS install will not carry over your old Apache customizations. diff /etc/apache2/httpd.conf against your saved copy and edit as necessary.
   • Start Apache using the terminal command sudo launchctl load -w /System/Library/LaunchDaemons/org.apache.httpd.plist. The -w means make it permanent across restarts.
   • PHP 5.6.30 is shipped with the OS but disabled in httpd.conf, same version as for Sierra. I sometimes enable PHP in order to debug programs that will be deployed in safe environments on other computers. If you enable it, be aware of the risks of making PHP available on the Internet from your Mac, and track and install security updates.
7. Screen saver: if you patched the duration of a screen saver slide, as I did, you will have to reapply the patch.
8. Login screen: if you replaced the login screen background, as I did, you will have to reapply the patch.

High Sierra Observations

New Features and Changes

Many of the advertised features of High Sierra sound uninteresting or worse to me.

AFS file sharing will not work from an APFS drive. In ► System Preferences... Sharing, click on 'File Sharing' and 'Options', and check 'Share files and folders using SMB.' This will cause trouble if you are trying to share files with an old Mac.

Unsigned kernel extensions will not load.

Apparently there is a hidden way to repair permissions. Apple Support Note HT203538 suggests the Terminal command diskutil resetUserPermissions / `id -u`.

The Photos app has been upgraded to 3.0. It adds better picture editing, and rearranges the controls and menus again. The 'Faces' feature of Photos works even worse than in Sierra: mystery meat navigation, no way to find Unnamed faces, no way to delete non-faces or don't care strangers.

Unchanged

Third party apps that appear to work OK:

• Office 2016
• Google Chrome
• Firefox

Bugs/Gotchas in High Sierra

• Gotcha on first boot: Firefox hung. Whether this was a new version of Firefox or an interaction with the new OS, it could not restore its old windows.
• Gotcha on first boot: Screensaver could not find the Photos folders, until I started Photos and let it reformat the Photos Library, and then quit and restarted System Preferences.
• Problem: On my 2012 Mac Mini, many operations are extremely slow. Perhaps this is because it has a hard drive instead of an SSD.

Removed Features

Download Java For Os X 2017

Planning for the next version

Keep a list of the software and devices you use and depend on, so you can check that they are supported.

32-bit programs

The next macOS version will probably release in Fall 2018. Apple has announced that this version of macOS will not support 32-bit software 'without compromise.' The next version won't do 32-bit at all. Start planning. To list the 32-bit programs on your system, you can execute this line in Terminal:

Home | FAQ© 2010-2020, Tom Van Vleckupdated 2020-03-25 09:34

Java for macOS 2017-001 installs the legacy Java 6 runtime for macOS 10.13 High Sierra, macOS 10.12 Sierra, macOS 10.11 El Capitan, macOS 10.10 Yosemite, macOS 10.9 Mavericks, macOS 10.8 Mountain Lion, and macOS 10.7 Lion.

This package is exclusively intended for support of legacy software and installs the same deprecated version of Java 6 included in the 2015-001, 2014-001, and 2013-005 releases.

Quit any Java applications before installing this update.

See https://support.apple.com/kb/HT6133 for more details about this update.

Download Java For Os X 2018-001 Download

See https://support.apple.com/kb/HT1222 for information about the security content of this update.

Java For Os X 2014-001