storagekitd
executablemacOS5.8 MBx86_64, arm64
Device management client — enforces MDM policies and configuration profiles
Applies Mobile Device Management configuration profiles to the system, enforcing security policies, settings, and restrictions set by an organization. Reads and writes NVRAM variables to persist device state, manages keychain credentials and certificates for MDM authentication, and communicates with MDM servers via network endpoints. Submits device analytics to Apple's unified analytics service. Exposes seven XPC services to allow other system components to query MDM status and retrieve managed configuration. Operates at the system level with direct hardware access and full keychain privileges.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 5.8 MB
- UUID
- E937F914-545A-34A1-814B-57A3EBB43D6C
- Analyzed
- 2026-04-09T10:06:27Z
- CDHash
- 9210253161007b49a977f55de90c69097ee38b95a8405afc9a47fd22b3b2fcf0
Capabilities
StorageRead and write system NVRAM variables
com.apple.private.iokit.system-nvram-allow[object Object]StoragePrivate storage area access
com.apple.private.security.storage-exempt.heritable[object Object]StoragePrivate storage area access
com.apple.private.security.storage.TimeMachine.heritable[object Object]HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemAccess MDM configuration profiles
com.apple.private.managedclient.configurationprofiles[object Object]SystemMDM configuration profiles
/System/Library/PrivateFrameworks/ConfigurationProfiles.framework/Versions/A/ConfigurationProfilesFrameworks34
FSKit(weak)CacheDelete(weak)libbootpolicy.dyliblibutil.dyliblibbsm.0.dylibCoreAnalytics(weak)DiskImages2SecurityDiscRecording(weak)DiskImagesMediaKitStorageKitAPFSOpenDirectoryDiskManagementIOKitRestoreProtectedCloudStorageEFILoginDiskArbitrationlibcsfde.dyliblibCoreStorage.dylibCocoa(weak)ConfigurationProfiles(weak)Bootability(weak)Foundationlibobjc.A.dyliblibSystem.B.dylibAppKit(weak)ApplicationServices(weak)CoreFoundation(weak)CoreGraphics(weak)CoreServices(weak)CoreText(weak)
Entitlements28
Interesting Strings
Bundle IDs(207)
File Paths(135)
telemetry(94)
-[DMERBDiskImageCopier copyDiagnosticsSystemToPath:percentBegin:percentEnd:]-[DMERBDiskImageCopier copyLegacyDiagnosticsSystemFromAppleBootPath:toPath:percentBegin:percentEnd:]-[DMERBDiskImageCopier removeDiagnosticsSystemAtPath:percentBegin:percentEnd:]-[DMRecoveryFileCopier calculateAndReplaceDiagnosticsToPath:atPercentBegin:percentEnd:]-[DMRecoveryFileCopier setupToReplaceDiagnosticsWithDIAGSImageFile:DIAGSChunkListFile:doVerifyImages:allowGrowth:withDMTool:statusReportingDisk:]
Network Surface
Networking Frameworks
Endpoints(11)
Ipv60:8:16
Hostnamedm.log.0
Hostnamedm.log.1
Hostnamerights.0.name
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
3
Hardware
1
IPC
0
Analytics
1
Security
1
System
2
Behavioral Profile
URL Endpoints
5
Telemetry Strings
94
File Paths
135
Bundle IDs
207
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 3608 functions identified
Functions(3608)
0x100001ae0-[SKUpdatePrebootOperation initWithDisk:withCompletionBlock:]
0x100001b8c-[SKUpdatePrebootOperation run]
0x100001d18-[SKUpdatePrebootOperation finished]
0x100001db8-[SKUpdatePrebootOperation dmAsyncStartedForDisk:]
0x100001e5c-[SKUpdatePrebootOperation dmAsyncProgressForDisk:barberPole:percent:]
0x100001ed4-[SKUpdatePrebootOperation dmAsyncMessageForDisk:string:dictionary:]
0x100001fd4-[SKUpdatePrebootOperation dmAsyncFinishedForDisk:mainError:detailError:dictionary:]
0x1000020ec-[SKUpdatePrebootOperation targetDisk]
0x1000020fc-[SKUpdatePrebootOperation setTargetDisk:]
0x100002108-[SKUpdatePrebootOperation replyBlock]
0x100002118-[SKUpdatePrebootOperation setReplyBlock:]
0x100002124-[SKUpdatePrebootOperation lastProgress]
0x100002134-[SKUpdatePrebootOperation setLastProgress:]
0x100002144-[SKUpdatePrebootOperation done]
0x100002158-[SKUpdatePrebootOperation setDone:]
0x100002168-[SKUpdatePrebootOperation error]
0x100002178-[SKUpdatePrebootOperation setError:]
0x100002184-[SKUpdatePrebootOperation .cxx_destruct]
0x1000021ecsub_1000021ec
0x1000024fcsub_1000024fc
Imports1120 symbols from 33 dylibs
Exports1
_mh_execute_header0x0