Apple Platform Security
-
Welcome
-
Introduction
-
-
Services security overview
-
-
Apple Pay overview
-
Apple Pay components
-
Secure Element and NFC controller
-
Payment authorisation
-
Transaction-specific dynamic security code
-
Pay with credit and debit cards in stores
-
Pay with credit and debit cards within apps
-
Paying with credit and debit cards on the web
-
Contactless passes
-
Render cards unusable
-
Suspending, removing and erasing cards
-
Apple Cash
-
Public transport cards
-
Credit and debit cards for public transport
-
Student ID cards
-
-
Business Chat
-
FaceTime
-
-
-
Developer Kits overview
-
-
HomeKit identity
-
Communication with HomeKit accessories
-
Local data storage
-
Data synchronisation between devices and users
-
Home data and apps
-
HomeKit and Siri
-
HomeKit IP cameras
-
HomeKit routers
-
iCloud remote access for HomeKit accessories
-
HomeKit TV Remote accessories
-
Apple TV profiles for HomeKit homes
-
-
CloudKit
-
SiriKit
-
DriverKit
-
Camera and ARKit
-
-
-
Secure device management overview
-
Pairing model
-
Passcode and password settings management
-
Configuration enforcement
-
Mobile device management (MDM)
-
Automated Device Enrolment
-
Apple Configurator 2
-
Device supervision
-
Device restrictions
-
Activation Lock
-
Lost Mode, remote wipe and remote lock
-
Screen Time
-
-
Glossary
-
Document Revision History
-
Copyright

Secure device management overview
iOS, iPadOS, macOS and tvOS support flexible security policies and configurations that are easy to enforce and manage. Through them, organisations can protect corporate information and ensure that employees meet enterprise requirements, even if they are using devices they’ve provided themselves — for example, as part of a “bring your own device” (BYOD) programme.
Organisations can use resources such as password protection, configuration profiles, remote wipe and third-party mobile device management (MDM) solutions to manage fleets of devices and help keep corporate data secure even when employees access this data on their personal devices.
With iOS 13, iPadOS 13.1 and macOS 10.15, Apple devices support a new user enrolment option specifically designed for BYOD programmes. User enrolments provide more autonomy for users on their own devices, while increasing the security of enterprise data by storing it on a separate, cryptographically protected APFS volume. This provides a better balance of security, privacy and user experience for BYOD programmes.