Table of Contents

• Welcome
• Intro to Apple Platform Security
• Hardware Security and Biometrics
  • Hardware Security Overview
  • Apple SoC Security
  • Secure Enclave
  • Optic ID, Face ID and Touch ID
    • Biometric Security
    • Magic Keyboard with Touch ID
    • Optic ID, Face ID, Touch ID, Passcodes and Passwords
    • Optic ID Matching Security
    • Facial Matching Security
    • Uses for Optic ID, Face ID and Touch ID
    • Secure Intent and Connections to the Secure Enclave
  • Hardware Microphone Disconnect
  • Express Cards with Power Reserve
• System Security
  • System Security Overview
  • Secure Boot
    • Boot Process for iPhone and iPad Devices
    • Memory Safe iBoot Implementation
    • Mac Computers with Apple Silicon
      • Boot Process
      • Boot Modes
      • Paired recoveryOS Restrictions
      • Startup Disk Security Policy Control
      • LocalPolicy Signing-Key Creation and Management
      • Contents of a LocalPolicy File for a Mac with Apple Silicon
    • Intel-based Mac Computers
      • Boot Process
      • Boot Modes
      • Startup Security Utility
      • Firmware password protection
      • recoveryOS and Diagnostics Environments
  • Signed System Volume Security
  • Secure Software Updates
  • Rapid Security Responses
  • Operating System Integrity
  • Device Pairing and Connection Security
    • Pairing Model Security
    • Activating Data Connections Securely
    • Verifying Accessories
    • iPhone Mirroring Security
  • BlastDoor for Messages and IDS
  • Lockdown Mode Security
  • Overview of Additional macOS System Security Capabilities
    • Additional macOS System Security Capabilities
    • System Integrity Protection
    • Trust Caches
    • Peripheral Processor Security
    • Rosetta 2 on a Mac with Apple Silicon
    • Direct Memory Access Protections
    • Securely Extending the Kernel
    • Option ROM Security
    • UEFI Firmware Security in an Intel-based Mac
  • System Security for watchOS
  • Random Number Generation
  • Apple Security Research Device
• Encryption and Data Protection
  • Encryption and Data Protection Overview
  • Passcodes and Passwords
  • Data Protection
    • Data Protection Overview
    • Data Protection
    • Data Protection Classes
    • Keybags for Data Protection
    • Protecting Keys in Alternate Boot Modes
    • Protecting User Data in the Face of Attack
    • Sealed Key Protection (SKP)
    • Role of Apple File System
    • Keychain Data Protection
  • FileVault
    • Volume Encryption with FileVault
    • Managing FileVault
  • How Apple Protects Users’ Personal Data
    • Protecting App Access to User Data
    • Protecting Access to User’s Health Data
  • Digital Signing and Encryption
• App Security
  • App Security Overview
  • App Code Signing Process
  • App Security in iOS, iPadOS and visionOS
    • Intro to App Security for iOS, iPadOS and visionOS
    • About App Store Security
    • Security of Runtime Process
    • App Protection and App Groups
  • App Security in macOS
    • Intro to App Security for macOS
    • App Code Signing Process
    • Gatekeeper and Runtime Protection
    • Protecting Against Malware
    • Controlling App Access to Files
  • Supporting Extensions
  • Secure Features in the Notes App
  • Secure Features in the Shortcuts App
• Services Security
  • Services Security Overview
  • Apple Account and Managed Apple Account
    • Apple Account Security
    • Managed Apple Account Security
  • iCloud
    • iCloud Security Overview
    • iCloud Encryption
    • Advanced Data Protection for iCloud
    • Security of iCloud Backup
    • iCloud Private Relay Security
    • Account Recovery Contact Security
    • Legacy Contact Security
  • Passcode and Password Management
    • Passcode Security Overview
    • Sign in with Apple Security
    • Automatic Strong Passwords
    • Password AutoFill Security
    • App Access to Saved Passwords
    • Password Security Recommendations
    • Password Monitoring
    • Sending Passwords
    • Credential Provider Extensions
    • iCloud Keychain
      • iCloud Keychain Security Overview
      • Secure Keychain Syncing
      • Secure iCloud Keychain Recovery
      • Escrow Security for iCloud Keychain
  • Apple Pay
    • Apple Pay Security Overview
    • Apple Pay Component Security
    • How Apple Pay Keeps Users’ Purchases Protected
    • Credit, Debit and Prepaid Cards
      • Card Provisioning Security Overview
      • Adding Credit or Debit Cards to Apple Pay
    • Payment Authorization with Apple Pay
    • Paying with Cards Using Apple Pay
    • Contactless Passes in Apple Pay
    • Rendering Cards Unusable with Apple Pay
    • Apple Card Security
    • Apple Cash Security
    • Tap to Pay on iPhone
  • Using Apple Wallet
    • Access Using Apple Wallet
    • Access Key Types
    • Car Key Security
    • Adding Transit and eMoney Cards to Apple Wallet
    • IDs in Apple Wallet
      • IDs in Apple Wallet
      • Security of IDs in Apple Wallet
  • iMessage
    • iMessage Security Overview
    • How iMessage Sends and Receives Messages
    • Check In Security
    • Secure iMessage Name and Photo Sharing
  • Secure Apple Messages for Business
  • FaceTime Security
  • Find My
    • Find My Security
    • Locating Missing Devices
  • Continuity
    • Continuity Security Overview
    • Handoff Security
    • iPhone Cellular Call Relay Security
    • iPhone Text Message Forwarding Security
    • Instant Hotspot Security
• Network Security
  • Network Security Overview
  • TLS Security
  • IPv6 Security
  • VPN Security
  • Wi-Fi Security and Privacy
    • Security Features When Connecting to Wireless Networks
    • Wi-Fi Security with Apple Devices
    • Privacy Features When Connecting to Wireless Networks
    • Wi-Fi Privacy with Apple Devices
  • Bluetooth Security
  • Ultra Wideband Security in iOS
  • Single Sign-on Security
  • AirDrop Security
  • Wi-Fi Password Sharing Security
  • Firewall Security in macOS
• Developer Kit Security
  • Developer Kit Security Overview
  • HomeKit Security
    • Communication Security
    • Data security
    • Securing Routers with HomeKit
    • Camera security
    • Security with Apple TV
  • SiriKit Security
  • WidgetKit Security
  • DriverKit Security
  • ReplayKit Security
  • ARKit Security
  • NFC & SE Platform Security
• Secure Device Management
  • Secure Device Management Overview
  • Mobile Device Management Security
    • MDM Security Overview
    • Managed Device Attestation Security
    • Configuration Enforcement
    • Automated Device Enrolment
    • Activation Lock Security
    • Managed Lost Mode and Remote Wipe
    • Shared iPad Security
  • Apple Configurator Security
  • Screen Time Security
• Glossary
• Document Revision History
• Copyright