Apple Platform Security

• Welcome
• Intro to Apple platform security
• Hardware security and biometrics
  • Hardware security overview
  • Apple SoC security
  • Secure Enclave
  • Optic ID, Face ID and Touch ID
    • Biometric security
    • Magic Keyboard with Touch ID
    • Optic ID, Face ID, Touch ID, passcodes and passwords
    • Optic ID matching security
    • Facial matching security
    • Uses for Optic ID, Face ID and Touch ID
    • Secure intent and connections to the Secure Enclave
  • Hardware microphone disconnect
  • Express Cards with power reserve
• System security
  • System security overview
  • Secure boot
    • Boot process for iPhone and iPad devices
    • Memory safe iBoot implementation
    • Mac computers with Apple silicon
      • Boot process
      • Boot modes
      • Paired recoveryOS restrictions
      • Startup Disk security policy control
      • LocalPolicy signing-key creation and management
      • Contents of a LocalPolicy file for a Mac with Apple silicon
    • Intel-based Mac computers
      • Boot process
      • Boot modes
      • Startup Security Utility
      • Firmware password protection
      • recoveryOS and diagnostics environments
  • Signed system volume security
  • Secure software updates
  • Rapid Security Responses
  • Operating system integrity
  • Device pairing and connection security
    • Pairing model security
    • Activating data connections securely
    • Verifying accessories
    • iPhone Mirroring security
  • BlastDoor for Messages and IDS
  • Lockdown Mode security
  • Overview of additional macOS system security capabilities
    • Additional macOS system security capabilities
    • System Integrity Protection
    • Trust caches
    • Peripheral processor security
    • Rosetta 2 on a Mac with Apple silicon
    • Direct memory access protections
    • Securely extending the kernel
    • Option ROM security
    • UEFI firmware security in an Intel-based Mac
  • System security for watchOS
  • Random number generation
  • Apple Security Research Device
• Encryption and Data Protection
  • Encryption and Data Protection overview
  • Passcodes and passwords
  • Data Protection
    • Data Protection overview
    • Data Protection
    • Data Protection classes
    • Keybags for Data Protection
    • Protecting keys in alternative boot modes
    • Protecting user data in the face of attack
    • Sealed Key Protection (SKP)
    • Role of Apple File System
    • Keychain data protection
  • FileVault
    • Volume encryption with FileVault
    • Managing FileVault
  • How Apple protects users’ personal data