Enabled/Disabled Identifiers & NBImageInfo.plist


The below is to try explain the use of the Enabled/Disabled Identifiers arrays in the NBImageInfo.plist on OSX Server.

This is to try & better explain their use.

How are they arrays generated?

NBI’s that are generated via SIU have a NBImageInfo.plist which is populated from the SupportedModelProperties array in /System/Library/CoreServices/PlatformSupport.plist.


That array then populates the “DisabledSystemIdentifiers” array in NBImageInfo.plist like the below:

This allows you in OSX Server.app to select the models to restrict booting to the NBI:

Screen Shot 2015-04-30 at 08.53.36

If this Array is empty then no restrictions can be made:

Screen Shot 2015-04-27 at 10.48.35


With the “EnabledSystemIdentifiers” array populated, access is restricted on the NBI, to only those System ID’s that are in the array.

This then shows in Server.app as the NetBoot Image as having “access restricted”

Screen Shot 2015-04-30 at 09.13.37

So the correct behaviour for any NetBoot Server is to whitelist based on entries in the ‘EnabledSystemIdentifiers’ array, in the same way as access is controlled based on entries in the “EnabledMACAddresses” array within NBImageInfo.plist.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.