Safe uninstallation of Security Recovery Core
Before removal, ensure your system is in a healthy state:
sudo security statusVerify:
Even though SRC maintains backups, create an additional backup for safety:
# Linux example
sudo dd if=/dev/mtd0 of=~/firmware_backup.bin bs=1M
# Or use your platform-specific backup toolStore this backup in a safe location separate from your USB recovery device.
Start the removal process:
sudo security removeOr with fewer prompts (still requires password):
sudo security remove --forceThe removal process requires 4 separate confirmations:
Enter your operating system password. This prevents unauthorized removal.
Enter your OS password: ********Confirm you understand the consequences:
Do you understand that firmware protection will be lost? [yes/no]: yesConfirm you have a backup:
Have you backed up your firmware? [yes/no]: yesType the exact word to confirm:
Type 'REMOVE' to confirm removal: REMOVENote: This is case-sensitive and must be typed exactly as shown.
5-second countdown with option to cancel:
FINAL WARNING:
This is your last chance to cancel. Press Ctrl+C within 5 seconds...Press Ctrl+C to cancel, or wait for removal to be scheduled.
If all confirmations pass, removal is scheduled:
Scheduling removal...
✓ Removal scheduled successfully
⚠ The Recovery Core will be removed on the next system reboot.
⚠ Please reboot your system to complete the removal process.Important: Removal is scheduled but not yet executed. You can still cancel by not rebooting and running security enable to clear the removal flag.
Reboot your system to complete removal:
# Linux/macOS
sudo reboot
# Windows
shutdown /r /t 0DO NOT INTERRUPT THE REBOOT PROCESS
Interrupting the reboot may cause incomplete removal or firmware corruption.
During the reboot process, Recovery Core performs the following:
Safety Check: If ANY validation fails during removal, the process is aborted and the system boots normally with SRC still active. You can then fix the issue and retry removal.
sudo security statusExpected output:
Status: NOT INSTALLEDLinux:
# Check that SRC region is cleared
sudo hexdump -C /dev/mtd0 | grep -A 10 "00100000"Windows:
Use vendor-specific SPI flash tools to verify reserved region is empty.
cd cli
make uninstallSymptoms: System boots normally, security status still shows "ENABLED"
Cause: Firmware integrity check failed or system was in unsafe state
Solution:
sudo security statussudo security removePossible Causes: Firmware write failed, SPI flash locked, platform-specific issue
Solution:
This should not happen if removal completed successfully.
If it does:
If removal process is interrupted and system is bricked:
SRC should still be active if removal didn't complete. System should auto-recover from USB device.
Use vendor-specific recovery tools to flash firmware from backup.
Provide removal logs, system information, and error messages for assistance.
Yes, but only before reboot. After reboot, removal proceeds automatically. To cancel, simply don't reboot and run security enable to clear the removal flag.
Removal may be incomplete. System should boot normally, but SRC may be in inconsistent state. Re-run removal process after ensuring system is healthy.
No. SRC only modifies firmware regions, never user data partitions. Your files, documents, and operating system data remain completely untouched.
No. Removal requires firmware-level changes that only take effect on reboot. This ensures a controlled, safe removal process.
Removal is aborted, system boots normally, and SRC remains active. Fix the issue (usually firmware integrity) and retry removal.
Yes. Follow the installation guide to reinstall SRC. Previous backups (if USB still present) may be reused.