求助：解密提取MacOSX加密安装包以获取InstallESD.dmg

Hey there, let's tackle this encrypted macOS installer pkg issue you're facing. Those files you downloaded are Apple's official encrypted installer packages—this is exactly why pkgutil can't open them directly. Below are two reliable methods to get to that InstallESD.dmg you need:

Method 1: Use Apple's Official createinstallmedia (Recommended) #

This is the safest and most straightforward approach, since Apple's tools are designed to handle their encrypted packages natively:

• First, move both downloaded .pkg/.pfpkg files into a single folder (e.g., name it MacOSInstallFiles for clarity).
• Open Terminal and navigate to that folder:

  cd /path/to/MacOSInstallFiles
  

• Install the packages (this won't install macOS on your system—just decrypts and stages the components):

  sudo installer -pkg encrypted*.pkg -target /
  

• Once installed, you'll find the full macOS installer app in your /Applications folder (it'll look like Install macOS [Version Name].app).
• You can directly grab InstallESD.dmg from this app's internal files. The path will be:

  /Applications/Install macOS [Version Name].app/Contents/SharedSupport/InstallESD.dmg
  

  Alternatively, if you want to create a bootable installer, run the createinstallmedia tool included with the app—this will also handle the decryption process automatically.

Method 2: Manual Decryption with Third-Party Tools (Advanced) #

If the official method isn't an option, you can manually decrypt the packages, but this requires finding the correct AES decryption key (tied to your specific installer version):

1. First, install pbzx (a tool for handling Apple's compressed payloads) via Homebrew:

   brew install pbzx
   

2. Expand the packages to view their internal structure:

   pkgutil --expand encrypted1202238309850061611.pfpkg expanded_pfpkg
   pkgutil --expand encrypted8769637421434146660.pkg expanded_pkg
   

3. To get the decryption key: Run the installer command from Method 1, then check your system log at /var/log/install.log—the key will be logged during the installation process.
4. Use pbzx to decrypt the payload and extract the files:

   pbzx -k YOUR_DECRYPTION_KEY_HERE expanded_pkg/Payload | cpio -i
   

   You'll find the InstallESD.dmg in the extracted files.

Important Notes #

• Make sure the installer packages you downloaded are compatible with your Mac's hardware and supported macOS versions—otherwise, even decrypted files won't work.
• Stick to the official method whenever possible to avoid security risks from untrusted third-party tools.
• Always use sudo when running installer commands to ensure you have the necessary admin permissions.

内容的提问来源于stack exchange，提问作者Huseyin Meric Yigit