fdesetup

executablemacOS834.1 KBx86_64, arm64

MDM profile manager — installs and enforces device management configurations

Manages Mobile Device Management (MDM) configuration profiles on macOS by reading MDM settings from the system and applying device policies. Accesses encryption keys through the device keychain and hardware for cryptographic operations. Maintains private storage for profile data and enforces security policies through the Security framework. Communicates with MDM endpoints to retrieve and validate configuration profiles. Handles code signing verification and certificate management as part of policy enforcement.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 834.1 KB
UUID: 560E439F-40E2-318F-BF6D-F8E1376C7E59
Analyzed: 2026-04-07T05:21:11Z
CDHash: b4c315f98c286633460d8d4a03e98a32175a8e7d69f321d62eb77f25d340391c

Capabilities

KeychainDevice key bag (encryption keys)

/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBag

StoragePrivate storage area access

com.apple.private.security.storage.ConfigurationProfilesPrivate [object Object]

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

SecuritySecurity framework extensions

/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

SystemAccess MDM configuration profiles

com.apple.private.managedclient.configurationprofiles [object Object]

SystemMDM configuration profiles

/System/Library/PrivateFrameworks/ConfigurationProfiles.framework/Versions/A/ConfigurationProfiles

Entitlements14

com.apple.keystore.filevaulttrue

com.apple.keystore.stash.accesstrue

com.apple.private.applecredentialmanager.allowtrue

com.apple.private.applecredentialmanager.contextdataextendedmaxage.allowtrue

com.apple.private.configurationprofiles.bootstraptoken.readonlytrue

com.apple.private.configurationprofiles.readwritetrue

com.apple.private.efilogin-helpertrue

com.apple.private.managedclient.configurationprofilestrue

com.apple.private.opendirectoryd.auth-hinttrue

com.apple.private.opendirectoryd.securetokentrue

com.apple.private.security.storage.ConfigurationProfilesPrivatetrue

com.apple.private.securityd.stashtrue

com.apple.private.tcc.allow

kTCCServiceAppleEvents

com.apple.rootless.storage.ConfigurationProfilesPrivatetrue

Interesting Strings

Bundle IDs(48)

!com.apple.private.efilogin-helper !com.apple.private.securityd.stash *com.apple.private.opendirectoryd.auth-hint ,com.apple.private.opendirectoryd.securetoken .com.apple.private.applecredentialmanager.allow

File Paths(43)

%s/Library/Logs/ManagedClient /AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c /AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/CommonUtil.c /AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCall.c /Library/Application Support/fdesetup/

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation SecurityFoundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

1

Network

0

Storage

1

Hardware

1

IPC

0

Analytics

0

Security

2

System

2

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

43

Bundle IDs

48

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code5c4b6c9d6dd975d2c4603a520c83198872e53c0443d34196a1098158c5fdabc7

Imports24cd2dbad59b38e5332f2a55cb5460012dd9610d7544f93bdb26014f0464a2bd

Frameworkscdc0d478cffafd8d9047514ad231909ef62d6e0257eac95cdd6ba30f45b6db7b

Classesb6276d4b72f237547271b51dd15fd1bbd0674acf1aa19715d8ae05ca7c32bb0a

Entitlements3707aaae0f4f15bc8305a0f8b897f91337d27749df1dd929facc98baa9b4a6cc

Symbols33ad00fa0bcf60165389e68c39f78c2c0c9e4f81b77e4fce9958eb427763591c

Static Libraries0 / 691 functions identified

Functions(691)

0x100001558-[MCX_ConfigCoreData dataFromConfigPropertyList:]

0x100001854-[MCX_ConfigCoreData dataToConfigPropertyList:]

0x1000019e0-[MCX_ConfigCoreData guidForUser:]

0x100001a30+[MCX_ConfigCoreData persistentStoreLocation:]

0x100001a84+[MCX_ConfigCoreData persistentStoreURL:]

0x100001ae4+[MCX_ConfigCoreData managedObjectModel]

0x100001d48+[MCX_ConfigCoreData managedObjectContext:]

0x1000021d4-[MCX_ConfigCoreData privateManagedObjectContext]

0x1000023d0-[MCX_ConfigCoreData cp_profilesForPredicate:loadPayloads:withSortKey:context:]

0x100002658sub_100002658

0x100002668sub_100002668

0x100002674sub_100002674

0x100002984sub_100002984

0x100002a04sub_100002a04

0x100002a6c-[MCX_ConfigCoreData cp_profilesForUser:withComputerProfiles:allowWildcardSearches:]

0x100002c2c-[MCX_ConfigCoreData cp_profilesForUser:withComputerProfiles:]

0x100002c34sub_100002c34

0x100002c50sub_100002c50

0x100002c5c+[MCX_ConfigCoreData createPersistentStoreDirectory]

0x100002c60+[MCX_ConfigCoreData removePersistentStoreFile:]

Imports370 symbols from 24 dylibs

libSystem.B.dylib105 CoreFoundation88 Foundation24 Security24 libobjc.A.dylib21

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

startupdiskhelper

system-override

mobile_obliterator