Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Managing FileVault
The Secure Enclave
The Secure Enclave is a dedicated secure subsystem in the latest versions of iPad, iPhone, Mac, Apple TV, Apple Vision Pro, Apple Watch, and HomePod. Overview The Secure Enclave is a dedicated secure subsystem integrated into Apple (SoC). The Secure Enclave is isolated from the main processor to provide an extra layer of security and is designed to keep sensitive user data secure even when the Application Processor kernel becomes compromised.
Escrow security for iCloud Keychain
iCloud provides a secure infrastructure for keychain escrow to help ensure that only authorized users and devices can perform a recovery. Topographically positioned behind iCloud are clusters of hardware security modules (HSMs) that guard the escrow records. As described previously, each has a key that’s used to encrypt the escrow records under their watch.
Apple Security Research Device
The Apple Security Research Device is a specially fused iPhone that allows security researchers to perform research on iOS without having to defeat or disable the platform security features of iPhone. With this device, a researcher can side-load content that runs with platform-equivalent permissions and thus perform research on a platform that more closely models that of production devices.
Express Cards with power reserve
If iOS isn’t running because iPhone needs to be charged, there may still be enough power in the battery to support Express Card transactions.
Protecting access to user’s health data
HealthKit provides a central repository for health and fitness data on iPhone and Apple Watch. HealthKit also works directly with health and fitness devices, such as compatible Bluetooth Low Energy (BLE) heart rate monitors and the motion coprocessor built into many iOS devices. All HealthKit interaction with health and fitness apps, healthcare institutions, and health and fitness devices require the permission of the user. This data is stored in the Data Protection class Protected Unless Open.
Protecting against malware in macOS
Apple operates a threat intelligence process to quickly identify and block malware. Three layers of defense Malware defenses are structured in three layers: 1. Prevent launch or execution of malware: App Store, or Gatekeeper combined with Notarization 2. Block malware from running on customer systems: Gatekeeper, Notarization, and XProtect 3.
Magic Keyboard with Touch ID
The Magic Keyboard with Touch ID (and the Magic Keyboard with Touch ID and Numeric Keypad) provides a Touch ID sensor in an external keyboard that can be used with any Mac with Apple silicon. The Magic Keyboard with Touch ID performs the role of the biometric sensor; it doesn’t store biometric templates, perform biometric matching, or enforce security policies (for example, having to enter the password after 48 hours without an unlock).
Secure intent and connections to the Secure Enclave
Search the user guide Secure intent provides a way to confirm a user’s intent without any interaction with the operating system or Application Processor.
Startup Disk security policy control for a Mac with Apple silicon
Overview Unlike security policies on an Intel-based Mac, security policies on a Mac with Apple silicon are for each installed operating system. This means that multiple installed macOS instances with different versions and security policies are supported on the same Mac. For this reason, an operating system picker has been added to Startup Security Utility. macOS storage selection to change the security policy.
IPv6 security
Search the user guide All Apple operating systems support IPv6, implementing several mechanisms to protect the privacy of users and the stability of the networking stack. When Stateless Address Autoconfiguration (SLAAC) is used, the IPv6 addresses of all interfaces are generated in a way that prevents tracking devices across networks and at the same time allows for a good user experience by ensuring address stability when no network changes take place.
Password Monitoring
Password Monitoring is a feature that matches passwords stored in your Password AutoFill keychain against a continuously updated and curated list of passwords known to have been exposed in leaks from different online organizations. If the feature is turned on, the monitoring protocol continuously matches your Password AutoFill keychain passwords against the curated list.
Boot process for a Mac with Apple silicon
When a Mac with Apple silicon is turned on, it performs a boot process much like that of iPhone and iPad. Boot process steps when a Mac with Apple silicon is started. The chip executes code from the Boot ROM in the first step in the chain of trust. macOS secure boot on a Mac with Apple silicon verifies not only the operating system code itself, but also the security policies and even kexts (supported, though not recommended) configured by authorized users.
Apple Platform Security
Tekenlimiet: 250 Neem geen persoonlijke informatie op in uw opmerking. De maximale tekenlimiet is 250. Verzend
DriverKit security for macOS
DriverKit is the framework that allows developers to create device drivers that the user installs on their Mac. Drivers built with DriverKit run in user space, rather than as kernel extensions, for improved system security and stability. This makes for easier installation and increases the stability and security of macOS. The user simply downloads the app (installers aren’t necessary when using system extensions or DriverKit) and the extension is enabled only when required.
Encryption and Data Protection overview
The secure boot chain, system security, and app security capabilities all help to verify that only trusted code and apps run on a device. Apple devices have additional encryption features to safeguard user data, even when other parts of the security infrastructure have been compromised (for example, if a device is lost or is running untrusted code).
Kernel extensions in macOS
Starting with macOS 11, if third-party kernel extensions (kexts) are enabled, they can’t be loaded into the kernel on demand. Instead, they’re merged into an Auxiliary Kernel Collection (AuxKC), which is loaded during the boot process. For a Mac with Apple silicon, the measurement of the AuxKC is signed into the LocalPolicy (for previous hardware, the AuxKC resided on the data volume).
Document revision history
Added two new Express Mode transactions in Express Cards with power reserve . Secure intent and connections to the Secure Enclave . Malware Removal Tool additions in Protecting against malware in macOS . Updates to Managing FileVault in macOS and Command-line tools. Merged the iOS Security Guide, macOS Security Overview, and the Apple T2 Security Chip Overview Privacy Controls, Siri and Siri Suggestions, and Safari Intelligent Tracking Prevention have been removed.
Apple Platform Security
Hardware security Secure software requires a foundation of security built into hardware. That’s why Apple devices—running iOS, iPadOS, macOS, tvOS, or watchOS—have security capabilities designed into silicon. Learn more about Apple hardware security System security Building on the unique capabilities of Apple hardware, system security is designed to maximize the security of the operating systems on Apple devices without compromising usability.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Managing
Contact Managing, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack