Apple Secure Boot

⚠️ iMac Pro Alert! Apple (amazingly/unprecedentedly?) provided me with a loaner iMac Pro a few days ago to check out, and in turn, I'm very eager to share my notes with you. Here are six initial impressions in a thread:

— Cabel (@cabel) December 12, 2017

④ New Chip. This seems big. The iMac Pro features new apple custom silicon: the T2 chip. It integrates previously discrete components, like the SMC, ISP for the camera, audio control, SSD control… plus a secure enclave, and a hardware encryption engine.

— Cabel (@cabel) December 12, 2017

⑤ Security. This new chip means storage encryption keys pass from the secure enclave to the hardware encryption engine in-chip — your key never leaves the chip. And, they it allows for hardware verification of OS, kernel, boot loader, firmware, etc. (This can be disabled…) pic.twitter.com/qKJ6bHdtr8

— Cabel (@cabel) December 12, 2017