Secure Enclave From Lock Screen.

Hello everyone! I'm currently working on implementing a Secure Enclave to encrypt data from the Login Screen with my application. I've followed the guidelines outlined in the developer documentation, which you can find here: Secure Enclave Documentation.

Despite following the documentation, I'm encountering issues with creating a key pair to encrypt data. I would appreciate any suggestions for necessary changes or additional permissions that might be required to address these challenges.

Thanks!

There’s no way to use the data protection keychain, and hence the Secure Enclave, from an authorisation plug-in because:

  • They only work in a user login context.

  • By definition, your authorisation plug-in is running outside of such a context.

If you’d like to see this change, I encourage you to file an enhancement request that outlines your specific requirements. Please post your bug number, just for the record.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Secure Enclave From Lock Screen.
 
 
Q