Apple confirms T2 coprocessor blocks some third-party Mac repairs
Repairing newer Mac hardware, such as the 2018 Mac mini and MacBook Air, at an unauthorized service center may soon be impossible thanks to new diagnostics requirements involving Apple's T2 security chip, the company recently confirmed.

Source: iFixit
Apple confirmed to The Verge that, under a recently revised repair process, only certain authorized replacement parts will work in a T2-equipped machine. Specifically, when critical hardware like a Touch ID module or logic board is replaced, the T2 chip renders Mac inoperable until the repair facility runs a piece of special diagnostics software.
Apple could not confirm which products or repairs the new policy affects, nor could it say when the procedure was first implemented.
Word of the revised policy surfaced in October, a month after Apple circulated a document to Authorized Service Providers detailing a modified repair procedure that requires proprietary "system configuration" software to be run after certain hardware components are replaced.
The software, called Apple Service Toolkit 2, works in conjunction with the T2 security chip and includes a "Mac Resource Inspector" and tools that examine a variety of computer systems including memory, display, power adapters and cooling system. Importantly, the toolkit is restricted to authorized personnel who have access to Apple's Global Service Exchange (GSX) network.
Apple's new process makes it exceedingly difficult, or in some cases impossible, for consumers to have their machines repaired by third party. This poses a problem for people who do not live near an Apple Store and rely on third-party repair shops to get their equipment fixed in a timely manner.
The protocol has renewed suspicions of "planned obsolescence" and, more directly, a potential play at "right to repair" legislation being readied in a number of U.S. states. Advocates of the latter are already speculating as to why Apple instituted the T2-based protocol.
"It's very possible the goal is to exert more control over who can perform repairs by limiting access to parts," iFixit CEO Kyle Wiens said in a statement to The Verge. "This could be an attempt to grab more market share from the independent repair providers. Or it could be a threat to keep their authorized network in line. We just don't know."
Early last month, the repair specialist tested the T2 repair procedure by swapping out the display and logic board of one 13-inch MacBook Pro with another, finding neither part replacement rendered the machine unusable. Display replacement does not require use of AST 2, Apple confirmed to The Verge, though it is unclear why iFixit was able to swap out logic boards.
The T2 coprocessor serves a variety of functions including the always-on "Hey, Siri" functionality on the new MacBook Air, preventing ne'er-do-wells from accessing the microphone when the computer is off, securing the Touch ID sensor, and stores cryptographic keys used in the secure boot process.
Apple has included T2 in several Macs to date -- the new Mac mini, MacBook Air and iMac Pro -- and is expected to continue rolling out the chip as new models are released.

Source: iFixit
Apple confirmed to The Verge that, under a recently revised repair process, only certain authorized replacement parts will work in a T2-equipped machine. Specifically, when critical hardware like a Touch ID module or logic board is replaced, the T2 chip renders Mac inoperable until the repair facility runs a piece of special diagnostics software.
Apple could not confirm which products or repairs the new policy affects, nor could it say when the procedure was first implemented.
Word of the revised policy surfaced in October, a month after Apple circulated a document to Authorized Service Providers detailing a modified repair procedure that requires proprietary "system configuration" software to be run after certain hardware components are replaced.
The software, called Apple Service Toolkit 2, works in conjunction with the T2 security chip and includes a "Mac Resource Inspector" and tools that examine a variety of computer systems including memory, display, power adapters and cooling system. Importantly, the toolkit is restricted to authorized personnel who have access to Apple's Global Service Exchange (GSX) network.
Apple's new process makes it exceedingly difficult, or in some cases impossible, for consumers to have their machines repaired by third party. This poses a problem for people who do not live near an Apple Store and rely on third-party repair shops to get their equipment fixed in a timely manner.
The protocol has renewed suspicions of "planned obsolescence" and, more directly, a potential play at "right to repair" legislation being readied in a number of U.S. states. Advocates of the latter are already speculating as to why Apple instituted the T2-based protocol.
"It's very possible the goal is to exert more control over who can perform repairs by limiting access to parts," iFixit CEO Kyle Wiens said in a statement to The Verge. "This could be an attempt to grab more market share from the independent repair providers. Or it could be a threat to keep their authorized network in line. We just don't know."
Early last month, the repair specialist tested the T2 repair procedure by swapping out the display and logic board of one 13-inch MacBook Pro with another, finding neither part replacement rendered the machine unusable. Display replacement does not require use of AST 2, Apple confirmed to The Verge, though it is unclear why iFixit was able to swap out logic boards.
The T2 coprocessor serves a variety of functions including the always-on "Hey, Siri" functionality on the new MacBook Air, preventing ne'er-do-wells from accessing the microphone when the computer is off, securing the Touch ID sensor, and stores cryptographic keys used in the secure boot process.
Apple has included T2 in several Macs to date -- the new Mac mini, MacBook Air and iMac Pro -- and is expected to continue rolling out the chip as new models are released.
Comments
Why? Auto manufacturers have similar procedures which are designed to prevent the ability for thieves to not only steal cars, but to part them
out and resell them. BMW being one of the biggest, and last I checked they were headquartered in Europe.
Don't expect it will be too much of a problem as long as they make the replacement kits and software readily available to third party repairers.
Then again, I expect someone somewhere will get something repaired that stops working, and complain that Apple are trying to screw everyone.
If the new iMacs and Mac pros have this, then Apple can kiss the Pro market goodbye. Who’s going to buy pro gear with no aftermarket value? Want to replace a HDD... that will be $960 at your authorized dealer thank you...
"Specifically, when critical hardware like a Touch ID module or logic board is replaced ..." i.e., parts you can only get from Apple.
And apparently some people also can't comprehend what they read well enough to work out that "authorized" Apple repair places are not just Apple Stores. Really, really rural people are still going to have a lack of easy options, but ... that applies to rural life generally, so I expect they're used to that, as it is part and parcel of deep-rural lifestyle.
The 99 percent of the two percent who actually upgrade their machines will find that they are as likely to be able to upgrade the RAM and HD/SSD internally as much as they currently can (which varies by model and heroic third-party efforts).
In the case that someone lodges a complaint with the EU, at the very least, I would expect Apple to be required to make things very to the consumer at time of purchase. At worst the T2 chip could be deactivated in the EU when the warranty on the machine expires (not unlike users being able to unlock phones when carrier contracts for handsets expire.
I see now reason why Apple could not let users validate repaired machines (using original components) from a home connection.
That is why the whole situation is currently under review in the EU with the hope that pan European laws on design protection can be updated to better reflect the wishes of EU citizens.
It means the security of you or your company's files doesn't end when I get out a screwdriver.
You are also quite myopic in your evaluation. No one is saying the device can’t be worked on out of warrantee. It just needs to be done by someone who is certified by Apple to do so. That’s it. That’s the only requirement. There are authorized Apple service centers all over. If it’s not nearby, you can mail it in.
Lastly, your obvious use of hyperbole is astounding. Really? You think that’s what authorized service centers would charge for a replaceable hard drive? Mind you that modern Macs mostly have the storage soldered to the motherboard so you would need to replace that too. The whole notion is that your Mac has enough storage to work for most of what you need and if you need more storage, you have Thunderbolt 3 which is PCI Express on a cable running 40 gbit/sec. I think you’ll be fine. You’ll be able to buy 2 TB of SSD storage for $100 in 10 years and have all the storage you could need.
PS: Macs don’t use HDD anymore... they use SSD.