---
title: "Appendix: Apple Silicon Secure Boot Tags"
framework: Private Cloud Compute Security Guide
role: article
role_heading: Article
path: private-cloud-compute/appendix_secureboot
---

# Appendix: Apple Silicon Secure Boot Tags

The format of an Image4 manifest.

## Overview

Overview Objects used in the APTicket include:  |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |  Cryptexes use an additional set of objects:  |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |   |  |  |  |  For additional information about trust cache objects, see Appendix: Apple Silicon Trust Cache Format. An Image4 manifest can specify the following constraints:  |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |   |  |