Kernel debugging with T2 SecureBoot

Hello,

I recently purchased a Mac Mini (my first Mac with T2) and wanted to see what was the right way to debug the kernel with a debug/development kernel that I may have missed. I disabled Secure Boot from Recovery Mode, but still found my debug/development kernel was not being picked up with the kcsuffix boot arg after I copied it into /System/Library/Kernels and invalidated the kext cache.

What did work was to overwrite the immutablekernel file in the PrelnkKernels directory wih my debug/development kernel (I assumed that after I disabled Secure Boot it would not check the certificates or verify the integrity of the binar); is this the only way? Is kcsuffix no longer supported with Secure Boot?

Thanks,


Neal