Blog

15 Nov
2020

kernel_task is throttling the CPU

Disable macOS 11 (Big Sur) 'kernel_task' which is throttling the CPU


WARNING ALERT: This ONLY relates to someone who has deleted the IOPlatformPluginFamily.kext in previous versions of macOS to sort the kernel_task overloading the CPU but now after installing macOS 11 (Big Sur) the problem has started again. You will be deleting a system extension and taking a risk... so you have been WARNED! + also best to use version 11.1 upwards, since when testing with 11.0.1 I found it very buggy!

So here is the problem...

After booting up the MacBook Pro the macOS would be running unbelievably slow. When opening the Activity Monitor to see what was happening with the CPU the thing at the top of the list was the kernel_task using around 500%!

'kernal_task_macOS_fix'

In any of the previous versions - macOS 10.14 (Mojave) or below it was a fairly easy fix by first running recovery mode CMD + R and in the terminal.

csrutil disable

Then running single user mode CMD + S.

fsck -fy

mount -uw /

sudo mkdir /IOPlatformPluginFamily-backup-kexts/

sudo mv /System/Library/Extensions/IOPlatformPluginFamily.kext /IOPlatformPluginFamily-backup-kexts/

sudo rm -rf /System/Library/Extensions/IOPlatformPluginFamily.kext

But from macOS 10.15 (Catalina) onwards this has stopped working. The reason being that Apple introduced the read-only system volume which is a dedicated partition for only storing system content which prevents any tampering with system files which one of them is the troublesome IOPlatformPluginFamily.kext.

Now before finding the solution below which relates to macOS 11 (Big Sur) I had tried making a bootable USB running macOS 10.14 (Mojave) but this couldn't read the read-only system volume.

Step 1 - Disable FileVault

Go to System Preferences -> Security & Privacy and choose the FileVault tab. Then select Turn Off FileVault.

Step 2 - Bypassing the Signed System Volume (SSV*)

SSV helps prevent tampering with any Apple software that is part of the operating system. Additionally, it makes macOS Software Update more reliable and much safer. SSV utilizes APFS snapshots, so if an update cannot be performed, the old system version can be restored without reinstallation.

So this means that macOS Big Sur actually no longer boots from the live system volume but now boots from a snapshot/copy of the same system folder. Normally it's impossible to mount a snapshot as writable, only readable so here is the solution I have found.

So at first bootup in Recovery Mode using CMD + R. On the screen that loads go to the navigation and choose Utilities -> Terminal. Input the following.

NOTE: Without this being done first you won't have permissions to carry out the next csrutil authenticated-root disable command.

csrutil disable

Then.

reboot

Straight away bootup in Recovery Mode again using CMD + R and choose Utilities -> Terminal. Input the following.

csrutil authenticated-root disable

Then.

reboot

Step 3 - Mount the Live Volume and backup the IOPlatformPluginFamily.kext file

Now reboot back into the normal macOS boot mode and let us mount the live volume - the disk1s5 could be different.

NOTE: To find out if 'disks5' is correct for your machine enter diskutil list in the terminal which will list your drives.

diskutil mount disk1s5

Next make it writable which will require you to enter your password - the /Volumes/Macintosh\ HD\ 1 could be different.

sudo mount -uw /Volumes/Macintosh\ HD\ 1

Password:

Now let's first see that the offending IOPlatformPluginFamily.kext file exists by entering.

ls -a /Volumes/Macintosh\ HD\ 1/System/Library/Extensions/

Rather than deleting the file we will do a backup - so use the below and move it to a newly created folder.

sudo mkdir /Volumes/Macintosh\ HD\ 1/IOPlatformPluginFamily-backup-kexts/

sudo mv /Volumes/Macintosh\ HD\ 1/System/Library/Extensions/IOPlatformPluginFamily.kext /Volumes/Macintosh\ HD\ 1/IOPlatformPluginFamily-backup-kexts/

Again see if it has disappeared from the directory.

ls -a /Volumes/Macintosh\ HD\ 1/System/Library/Extensions/

Step 4 - Create snapshot and tag it for the next default reboot.

Now we have deleted the file we need to add this new version of the system folder as a snapshot so enter the following.

sudo /System/Library/Filesystems/apfs.fs/Contents/Resources/apfs_systemsnapshot -s "SnapshotName" -v /Volumes/Macintosh\ HD\ 1

Then tag this as a our default for the next reboot.

sudo /System/Library/Filesystems/apfs.fs/Contents/Resources/apfs_systemsnapshot -r "SnapshotName" -v /Volumes/Macintosh\ HD\ 1

Now fingers crossed you should be able to reboot and the kernel_task should no longer be hogging the CPU as before and in return slowing your machine down.

Posted in: < Mac OS X >
me@grafxflow avatar

me@grafxflow


I am a Full-stack Developer who also started delving into the world of UX/UI Design a few years back. I blog and tweet to hopefully share a little bit of knowledge that can help others around the web. Thanks for stopping by!

Visitors also viewed these posts

55 Thoughts

  1. 16 Nov
    2020

    avatar

    John

    You shouldn't do the `csrutil authenticated-root enable` again as it will re-enable the verification/tampering on the SSV. This will result it not booting from your new snapshot but using the old one.

    Correct me if I'm wrong though :)
  2. 16 Nov
    2020

    avatar

    me@grafxflow

    Thanks for the update John.

    I was unaware of this, but yes it seems to be the case.

    I have updated the content :)
  3. 16 Nov
    2020

    avatar

    Florian

    Thank you for the nice description. Unfortunately its not working for me. The Operation is not permitted.

    sudo mv /Volumes/Macintosh\ HD\ 1/System/Library/Extensions/IOPlatformPluginFamily.kext /Volumes/Macintosh\ HD\ 1/IOPlatformPluginFamily-backup-kexts/
    mv: rename /Volumes/Macintosh HD 1/System/Library/Extensions/IOPlatformPluginFamily.kext to /Volumes/Macintosh HD 1/IOPlatformPluginFamily-backup-kexts/IOPlatformPluginFamily.kext: Operation not permitted

    What have I done wrong?
  4. 17 Nov
    2020

    avatar

    me@grafxflow

    Hi Florian,

    Have you tried the?

    sudo mount -uw /Volumes/Macintosh\ HD\ 1

    If not try the Recovery Mode using CMD + R and input.

    csrutil disable
  5. 18 Nov
    2020

    avatar

    John

    There's one downside I'm experiencing, after disabling authenticated-root boot times of my macbook have increased with 5 minuntes.
    The loading bar crawls to the center as usual, stops for 4-5 minutes and then continues as usual. Once in macOS everything is fast and well, shutdown takes ages too.

    Anyone with similar problems?
  6. 19 Nov
    2020

    avatar

    me@grafxflow

    Hi John,

    Yes I am noticing this to. It seems to hold 50% on the loading bar for a few minutes when starting up. Plus the fans are on full blast. Maybe see what happens with the next macOS update.

    I also might need to look inside the laptop and see if cleaning it with some compressed air spray will sort the problem.

    regards
    Paul
  7. 19 Nov
    2020

    avatar

    Vi

    Hi! I updated my macbook air and the kernel task is just taking up all the cpu. I tried to do this but filevault is preventing it. I tried disabling it but it just isnt decrypting. Any idea what I could do?
  8. 19 Nov
    2020

    avatar

    me@grafxflow.co.uk

    Hi Vi,

    Try the following:

    Go to System Preferences -> Security & Privacy.

    Then select the FileVault tab and Turn Off FileVault.

    Then one thing that is missing from the tutorial (Need to update it)

    Bootup in Recovery Mode using CMD + R then enter

    'csrutil disable'

    'reboot'

    Then start from 'Step 1 - Bypassing the Signed System Volume (SSV*)'
  9. 20 Nov
    2020

    avatar

    John

    Hi Paul, I have reinstalled Big Sur and redit my patch (new snapshot and all) and now the boottimes are back to normal.
    So if you're stuck at that, try recovery console - reinstall big sur et voilla :D
  10. 20 Nov
    2020

    avatar

    me@grafxflow

    Hi John,

    So just to confirm you suggest installing the macOS from Recovery Mode rather than the desktop?

    And do you mean a reinstall or fresh install wiping the hard drive?
  11. 01 Dec
    2020

    avatar

    TheMalfunctioningSMC

    Have you figured out how to fix the boot time?
  12. 01 Dec
    2020

    avatar

    me@grafxflow

    Hi TheMalfunctioningSMC,

    Sadly not. I am beginning to think it maybe the actual macOS so will wait until there is an update.
  13. 02 Dec
    2020

    avatar

    TheMalfunctioningSMC

    Hi grafxflow,

    I followed all of your steps and it went through perfectly fine. Thanks for saving the day! Btw did you try John's suggestion of reinstalling Big Sur and "patching" the kexts again? What if macOS 15.2 releases, is it advisable to upgrade or will it break our patch? Does Activity Monitor itself take a high CPU % when open? Do you suggest any fan RPM app? I want to set it at 3500RPM

    Sorry to bother you with so many questions. Thanks again!!
  14. 02 Dec
    2020

    avatar

    me@grafxflow

    Hi TheMalfunctioningSMC,

    1. I did try what John suggested but it still gave me the slow startup.

    2. From my experience it mainly relates to new versions of macOS where this needs to be done again.

    3. Activity Monitor itself should not cause any problems with the CPU usage.

    4. You can use a fan app but still keep an eye on the temperatures.
  15. 08 Dec
    2020

    avatar

    TEO

    Hi, congrats for your impirtant guide. I'm experiencing throttling eating all of my CPU and fans spinning at max rpm due to faulty flat cable from MoBo to trackpad. I want to temporarily disable it because i have to use the MBP for work. Cannot even mount "sudo mount -uw /Volumes/MBPTeo 1 cause after typing password is outputting: unknown special file or file system. I did all of the previous steps, i'm with big sur 11.0.1 mbp 15" mid 2015
    Thanks
  16. 08 Dec
    2020

    avatar

    TEO

    EDIT:
    I solved by simply spacing .../MBPteo\ 1/... In this way. Now after having done as described in the guide (csrutil disable and csrutil root disable) still says "operation not permitted" trying now to perform those cmds again. I'll keep you up to date.
  17. 08 Dec
    2020

    avatar

    me@grafxflow

    Great TEO,

    I will update the tutorial if required :)
  18. 08 Dec
    2020

    avatar

    TEO

    Well. After struggling about three hours in the vane attempt of removing the damn IOPlatformPlugin....kext, it finally seem no longer to be in the Extensions folder. I list all of the Extensions folder content and no IOPlatform....kext is listed. As soon as the OS reboots after reboot (turn off, then tur on by pressing the button) the damn kext file is listed as no cancelings were made. What the?! I'm going to call it Bug Sur from now on.
  19. 20 Dec
    2020

    avatar

    Anie

    Hi, Thanks for your detailed solution. I currently run a 2013 MBP and have overheating issues. I recently upgrade to Big Sur. But I haven't deleted the IOPlatformPluginFamily.kext in previous versions of macOS. Do you have a solution/link where I cant start working from before I get to this part?
  20. 20 Dec
    2020

    avatar

    me@grafxflow

    Hi Anie,

    It maybe an option to look at some youtube videos on cleaning the inside of your laptop. Using something like compressed air to clean the filters might help.
  21. 22 Dec
    2020

    avatar

    TEO

    Well, I found the solution for disabling thermal throttling related cpu underclock.
    There is an IC near the SMC chip, which is responsabile of PROCHOT and THRMTRIP security temperature management. This is dangerous so make sure to properly manage the temperatures via Istats and mac fan control.
  22. 24 Dec
    2020

    avatar

    Alex

    Hello grafxflow,
    (Sorry, that's the only name I could find on the website :) )
    Just wanted to say a HUGE thank you for this article!
    I was struggling with lags ond freezes for the last several months, and despite of many trials and exhausting searches on the web. I'm so glad that you published this article, thank you so much!

    Merry Christmas, and the best wishes to you and your family!
    Happy Holidays!
  23. 15 Jan
    2021

    avatar

    Blake

    hi i am trying to do this task and every time i do the sudo mount part it tells me "unkown special file or file systems" and idk what that means? you said that the /Volumes/Macintosh\ HD\ 1 may be different? what does that mean?
  24. 15 Jan
    2021

    avatar

    Blake

    hi just recently posted, i got past the sudo mount part, but when i type in 1s -a......... it tells me that 1s isnt a found command? is it not 1s? need help.
  25. 15 Jan
    2021

    avatar

    Asrael

    Hi I can't do it new systemsnapshot, Is writing

    open: Resource busy
    open failed on /dev/disk1s5

    please tell me more about the command for apfs_systemsnapshot
  26. 17 Jan
    2021

    avatar

    Blake

    Hey again, so a little update. I got it all to work, and i went to reset nvram and it all went to hell. I had to reset back to yosemite and spent a full day trying to reinstall big sur. But i finally got. It all loaded back up and am now trying this guide again, and it keeps telling me during the sudo mkdir part that the backup-kexts file is read only, and then the snapshot fails to create operation denied. I alrady did all the csrutil disable. Need help lol
  27. 23 Jan
    2021

    avatar

    Ipunchcorndogs

    When I try to do step 4 it says
    sudo: /system/library/filesystems/apfs.fs/contents/resources/apfs_systemsnapshot: command not found
  28. 23 Jan
    2021

    avatar

    me@grafxflow

    Hi Ipunchcorndogs,

    I think there is a typo. Try the following instead.

    sudo /system/library/filesystems/apfs.fs/contents/resources/apfs_systemsnapshot
  29. 27 Jan
    2021

    avatar

    Moe

    Can i delete the snapshot after the booting?
    Because i don’t have so much space on my HD haha
  30. 27 Jan
    2021

    avatar

    me@grafxflow

    Hi Moe,

    Sadly not because it's the snapshot you will be booting from every time.
  31. 31 Jan
    2021

    avatar

    Mir

    I can’t deactivate FileVault :( I try everything.

    I unlock this thing and it’s Stil grey :/
  32. 01 Feb
    2021

    avatar

    Grisha

    What is the best way to revert something like this?
  33. 01 Feb
    2021

    avatar

    me@grafxflow

    Hi Grisha,

    I think the easiest option is to go back to stage 2.

    csrutil authenticated-root enable
  34. 11 Feb
    2021

    avatar

    IPC

    Can this fix work for Catalina as well?
  35. 11 Feb
    2021

    avatar

    me@grafxflow

    Hi IPC,

    Yes the same should work for Catalina.
  36. 14 Feb
    2021

    avatar

    Voldemort

    Hi me@grafxflow,

    I have this problem on my MacBook Pro 16' after upgraded to Big Sur 11.2.1.

    But I have not deleted the IOPlatformPluginFamily.kext in previous versions of macOS. Would this method also available for me?
  37. 14 Feb
    2021

    avatar

    me@grafxflow

    Hi Voldemort,

    Yes I am using the same Big Sur 11.2.1. Even with every Big Sur update I have to still do this.

    I have never had to do this in the past but it all comes down to the new way the system folder is created in the newer MacOS's.
  38. 14 Feb
    2021

    avatar

    Voldemort

    Hi me@grafxflow,

    I'm going to try your method and would you tell me how to know which one I should mount if the disk1s5 and the /Volumes/Macintosh\ HD\ 1 is different from Step 3?

    Thanks.
  39. 14 Feb
    2021

    avatar

    me@grafxflow

    Hi Voldemort,

    'disk1s5' may actually be the identifier/alias for '/Volumes/Macintosh\ HD\ 1'. So still use 'Volumes/Macintosh\ HD\ 1' but to find out - in the terminal enter the following.

    diskutil list

    Hope this helps. Also updated tutorial content.
  40. 15 Feb
    2021

    avatar

    Voldemort

    Hi me@grafxflow,

    I have done the steps but when "sudo mount -uw /Volumes/Macintosh\ HD\ 1" the output goes: unknown special file or file system. However the next stpes seems OK. I'm confused if I do the works well? Would you help me confirm it?

    Sorry for my many questions. Thanks for your help!

    https://imgur.com/9y6LTLF
    https://imgur.com/tuGtDtC
    https://imgur.com/DNWvyBT
  41. 15 Feb
    2021

    avatar

    Voldemort

    One downside I'm experiencing is, CPU is on 800MHz almost all the time.

    Anyone with similar problem?
  42. 13 Mar
    2021

    avatar

    Steven C

    Hi,

    I was able to compete the tutorial. My intent is to prevent the AppleIntelKBLGraphics.kext from loading which causing my screen flickering badly. Upon completed and restarted, how to confirm whether:

    1) Big Sur is loaded from the new snapshot instead?
    2) Sadly I can still see the AppleIntelKBLGraphics.kext being loaded from kextstat command. Strangely, it was removed from /System/Library/Extensions after reboot though.
    3) Any method to reset back to original snapshot?
  43. 17 May
    2021

    avatar

    ET

    Thank you so much for this guide. I seem to be getting stuck where others got stuck but later said they figured it out but never posted what they figured out. I am stuck here…"sudo mount -uw /Volumes/Macintosh\ HD\ 1" the output goes: unknown special file or file system.

    I know I am sure you are tired of all the question but I would very much appreciate any help you could offer. Thanks!
  44. 19 May
    2021

    avatar

    Coco

    Hi ET,

    Try the step 3 with "diskutil mount disk1s1" the localisation of Macintosh HD is perhaps different.
  45. 22 May
    2021

    avatar

    Nima

    Thank you for the great post. Did you find a solution to the slow booting time? As you mentioned, it gets stuck for a few minute on around 50% and then boots.
  46. 22 May
    2021

    avatar

    me@grafxflow

    Hi Nina,

    Sadly not :(
  47. 24 May
    2021

    avatar

    ET

    Thank you Coco and me@grafxflow for the help… I am way over my skis but any advice how to get past step 3 would be great. Diskutil list shows this… any personalized steps next would be so helpful… thanks!!! (Hit char limit will post below)
  48. 24 May
    2021

    avatar

    Et

    /dev/disk0 (internal, physical):
    #: TYPE NAME SIZE IDENTIFIER
    0: GUID_partition_scheme *500.3 GB disk0
    1: EFI ⁨EFI⁩ 209.7 MB disk0s1
    2: Apple_APFS ⁨Container disk1⁩ 500.1 GB disk0s2/dev/disk1 (synthesized):
    #: TYPE NAME SIZE IDENTIFIER
    0: APFS Container Scheme - +500.1 GB disk1 Physical Store disk0s2
  49. 24 May
    2021

    avatar

    Et

    1: APFS Volume ⁨HD - Data⁩ 152.9 GB disk1s1
    2: APFS Volume ⁨Preboot⁩ 282.2 MB disk1s2
    3: APFS Volume ⁨Recovery⁩ 622.1 MB disk1s3
    4: APFS Volume ⁨VM⁩ 1.1 GB disk1s4
    5: APFS Volume ⁨HD⁩ 15.3 GB disk1s5
    6: APFS Snapshot ⁨com.apple.os.update-...⁩ 15.3 GB disk1s5s1
  50. 27 May
    2021

    avatar

    iom

    It worked for me :) but now booting/shutdown is taking too long, maybe 3 to 5 minutes. Any thoughts?
  51. 27 May
    2021

    avatar

    me@grafxflow

    Hi Et,

    Best to disconnect any external harddrives when doing this.
  52. 27 May
    2021

    avatar

    me@grafxflow

    Hi iom,

    I have looked at the startup in verbose mode and it seems to hang on the x86PlatFormPlugin which is what has been deleted. So I need to look into this in more detail.

    UPDATE: Sadly the best solution for me was to revert back to macOS Catalina
  53. 05 Jun
    2021

    avatar

    glx101

    iMac 2017 21 Big Sur 11.4
    > 6 months running older OS high CPU usage has slowed system performance. Full stripdown service, clean and reinstall latest OS
    yet the issue persists.

    temps within normal range 24º-35ºC
    STATUS:
    Every time I try to boot into safe mode system hangs so I used a USB Boot for Mojave..
    into safe mode csrutil disable - works fine
    reboot into safe mode csrutil authenticated-root disable FAILS Every time invalid command "authenticated-root"

    suggestions please?
  54. 05 Jun
    2021

    avatar

    me@grafxflow

    Hi glx101,

    csrutil authenticated-root disable is only required for 'Big Sur', and should only work in 'Recovery Mode'

    I have gone back to using macOS Catalina.... which I know is a pain!
  55. 07 Jun
    2021

    avatar

    glx101

    Thanks for the replay and
    Ahhh ok so if I use a USB (mine wont boot into std recovery by itself) do I have to do anything else (different) to disable the csrauthenticated-root.

    I had wondered if that might be causing me issues.

Add comment

Add comment