Apple Platform Security
- Welcome
- Intro to Apple platform security
-
- Encryption and Data Protection overview
- Passcodes and passwords
-
- Data Protection overview
- Data Protection
- Data Protection classes
- Keybags for Data Protection
- Protecting keys in alternative boot modes
- Protecting user data in the face of attack
- Sealed Key Protection (SKP)
- Activating data connections securely in iOS and iPadOS
- Role of Apple File System
- Keychain data protection
- Digital signing and encryption
-
- Services security overview
-
- Apple Pay security overview
- Apple Pay component security
- How Apple Pay keeps users’ purchases protected
- Payment authorisation with Apple Pay
- Paying with cards using Apple Pay
- Contactless passes in Apple Pay
- Rendering cards unusable with Apple Pay
- Apple Card security
- Apple Cash security
- Tap to Pay on iPhone
- Secure Apple Messages for Business
- FaceTime security
- Glossary
- Document revision history
- Copyright
Secure device management overview
iOS, iPadOS, macOS and tvOS support flexible security policies and configurations that are easy to enforce and manage. Through them, organisations can protect corporate information and help ensure that employees meet enterprise requirements, even if they are using devices they’ve provided themselves — for example, as part of a “bring your own device” (BYOD) programme.
Organisations can use resources such as password protection, configuration profiles, remote wipe and third-party mobile device management (MDM) solutions to manage fleets of devices and help keep corporate data secure even when employees access this data on their personal devices.
In iOS 13 or later, iPadOS 13.1 or later, and macOS 10.15 or later, Apple devices support a new user enrolment option specifically designed for BYOD programmes. User enrolments provide more autonomy for users on their own devices, while increasing the security of enterprise data by storing it on a separate, cryptographically protected APFS (Apple File System) volume. This provides a better balance of security, privacy and user experience for BYOD programmes.