Skip to main content

Hardware Encryption Capabilities for Apple Hardware

What the inventory value means

Apple devices can report hardware encryption details through MDM. These values help confirm whether a device supports block-level encryption, file-level encryption, or both.

When to use it

FileWave can report Apple's HardwareEncryptionCaps value as part of the MDM security information returned by supported devices. Apple documents this value in the SecurityInfo response: https://developer.apple.com/documentation/devicemanagement/securityinforesponse/securityinfo.

Related FileWave security fields

  • Hardware Encryption Capabilities is available for iOS and iPadOS 4+, tvOS 9+, visionOS 1.1+, and watchOS 10+.
  • Passcode Present is available on the same platforms and helps determine whether data protection is active when read with Hardware Encryption Capabilities. It does not apply to User Enrollment.
  • Is Recovery Lock Enabled reports whether Recovery Lock is enabled on Apple silicon Macs running macOS 11.5+.

Apple values returned by MDM

HardwareEncryptionCaps is an integer that indicates the underlying hardware encryption capabilities of the device, which is one of the following values:

  • 1: Block-level encryption

  • 2: File-level encryption

  • 3: Both block-level and file-level encryption

Apple documents HardwareEncryptionCaps for iOS and iPadOS 4+, tvOS 9+, visionOS 1.1+, and watchOS 10+.

For a device to have data protection, HardwareEncryptionCaps must be 3 and PasscodePresent must be true.

No comments to display

Back to top