diff --git a/config-custom.plist b/config-custom.plist
index 3d26e39..f4f0519 100644
--- a/config-custom.plist
+++ b/config-custom.plist
@@ -1064,10 +1064,8 @@
 		<array/>
 		<key>Security</key>
 		<dict>
-			<key>AllowNvramReset</key>
-			<true/>
 			<key>AllowSetDefault</key>
-			<false/>
+			<true/>
 			<key>ApECID</key>
 			<integer>0</integer>
 			<key>AuthRestart</key>
@@ -1087,7 +1085,7 @@
 			<key>PasswordSalt</key>
 			<data></data>
 			<key>ScanPolicy</key>
-			<integer>13056</integer>
+			<integer>2687747</integer>
 			<key>SecureBootModel</key>
 			<string>Disabled</string>
 			<key>Vault</key>
@@ -1221,8 +1219,6 @@
 				<string>ForceDisplayRotationInEFI</string>
 			</array>
 		</dict>
-		<key>LegacyEnable</key>
-		<false/>
 		<key>LegacyOverwrite</key>
 		<false/>
 		<key>LegacySchema</key>
@@ -1273,9 +1269,7 @@
 			<key>ProcessorType</key>
 			<integer>0</integer>
 			<key>ROM</key>
-			<data>
-			{{ROM}}
-			</data>
+			<string>{{ROM}}</string>
 			<key>SpoofVendor</key>
 			<true/>
 			<key>SystemMemoryStatus</key>
@@ -1362,8 +1356,6 @@
 			<false/>
 			<key>SetupDelay</key>
 			<integer>0</integer>
-			<key>VolumeAmplifier</key>
-			<integer>0</integer>
 		</dict>
 		<key>ConnectDrivers</key>
 		<true/>
diff --git a/config-nopicker-custom.plist b/config-nopicker-custom.plist
index 7033537..590e892 100644
--- a/config-nopicker-custom.plist
+++ b/config-nopicker-custom.plist
@@ -1064,10 +1064,8 @@
 		<array/>
 		<key>Security</key>
 		<dict>
-			<key>AllowNvramReset</key>
-			<true/>
 			<key>AllowSetDefault</key>
-			<false/>
+			<true/>
 			<key>ApECID</key>
 			<integer>0</integer>
 			<key>AuthRestart</key>
@@ -1087,7 +1085,7 @@
 			<key>PasswordSalt</key>
 			<data></data>
 			<key>ScanPolicy</key>
-			<integer>13056</integer>
+			<integer>2687747</integer>
 			<key>SecureBootModel</key>
 			<string>Disabled</string>
 			<key>Vault</key>
@@ -1221,8 +1219,6 @@
 				<string>ForceDisplayRotationInEFI</string>
 			</array>
 		</dict>
-		<key>LegacyEnable</key>
-		<false/>
 		<key>LegacyOverwrite</key>
 		<false/>
 		<key>LegacySchema</key>
@@ -1273,9 +1269,7 @@
 			<key>ProcessorType</key>
 			<integer>0</integer>
 			<key>ROM</key>
-			<data>
-			{{ROM}}
-			</data>
+			<string>{{ROM}}</string>
 			<key>SpoofVendor</key>
 			<true/>
 			<key>SystemMemoryStatus</key>
@@ -1362,8 +1356,6 @@
 			<false/>
 			<key>SetupDelay</key>
 			<integer>0</integer>
-			<key>VolumeAmplifier</key>
-			<integer>0</integer>
 		</dict>
 		<key>ConnectDrivers</key>
 		<true/>
diff --git a/generate-specific-bootdisk.sh b/generate-specific-bootdisk.sh
index 48070a0..21c2804 100755
--- a/generate-specific-bootdisk.sh
+++ b/generate-specific-bootdisk.sh
@@ -245,7 +245,7 @@ generate_bootdisk () {
             && [ "${UUID}" ] \
             && [ "${MAC_ADDRESS}" ]; then
         ROM="${MAC_ADDRESS//\:/}"
-        ROM="${ROM,,}"
+        ROM="$(awk '{print tolower($0)}' <<< "${ROM}")"
         sed -e s/\{\{DEVICE_MODEL\}\}/"${DEVICE_MODEL}"/g \
             -e s/\{\{SERIAL\}\}/"${SERIAL}"/g \
             -e s/\{\{BOARD_SERIAL\}\}/"${BOARD_SERIAL}"/g \