Everything you need to know about Apple's T2 chip in the 2018 Mac mini and MacBook Air
Apple's custom T2 chip recently made its way from the iMac Pro to the 2018 MacBook Pro, where it is responsible for a lot more than people think. AppleInsider explains everything you need to know about it.
Editor's note: This piece first ran shortly after the MacBook Pro added the T2 chip. However, given its inclusion in the new MacBook Air and Mac mini, a refresher is in order. The article also includes new information from Apple regarding the T2's capabilities.
First off, the T2 is an upgrade from the T1 that launched inside the 2016 MacBook Pro. The T1 chip's main purpose was running the System Management Controller (SMC), and the Touch ID sensor within the Touch Bar. A Secure Enclave co-processor handles encryption of fingerprints, and plays a gatekeeper to microphone and FaceTime HD camera access.
The newer T2 takes care of the exact same tasks as the T1, but adds an image signal processor, audio controller, and a mass storage controller that includes a dedicated AES engine for encryption.
Apple says the image signal processor works with the FaceTime HD camera to enable enhanced tone mapping, improved exposure control, and face-based auto-exposure, as well as automatic white balancing. As you can see in our video, white balancing is indeed much better, exposure is improved, and the detail in hair and eyes no longer gets crushed by dark shadows.
We've also noticed a pretty big difference in microphone quality, thanks to the T2's audio controller, which processes signals that ultimately end up at the MacBook's stereo speakers. That probably contributes to the better sound output found in this year's MacBook Pro models. On top of that, the T2 chip adds "Hey Siri" support.
Thanks to the new SSD controller, the T2 automatically encrypts your drive regardless of whether you have FileVault on or not. Apple recommends that you do enable it, however, for added security. Without FileVault, your encrypted SSDs will automatically mount and decrypt without a password when connected to your Mac.
The T2's encryption uses dedicated Apple-designed silicon instead of a third-party processor. There are two benefits to this, the first being the fact that your data never reaches the Intel processor, so it's more secure. The second is that by using dedicated hardware, there's no effect on SSD performance.
After enabling FileVault on the 2017 MacBook Pro, which lacks the T2, we were told we would have to wait a full day for encryption to finish -- and that if we suddenly decided against it, we wouldn't be able disable it until the process was complete. Even once it finished, storage read speeds dipped significantly.
On the 2018 MacBook Pro enabling FileVault is instantaneous, with no change in subsequent speeds at all.
The biggest security enhancement may actually be Secure Boot. This makes sure that only a legitimate, trusted operating system loads at startup. By default it's in Full Security mode, allowing only your current OS or signed OS software trusted by Apple to run. It also disallows booting from external media, such as USB or Thunderbolt drives.
This offers huge protection from hackers who could potentially boot into a different operating system in order to steal your data. Although not recommended, you can change these settings within macOS Recovery mode.
Since Apple's custom T-series chips are integrating an increasing number of system controllers, it may be making it easier than ever for Apple to switch over to their own line of processors and ditch Intel for good. And seeing as Intel has once again delayed delivery of their 10-nanometer processors, an architecture Apple has been on for over a year with its A-series processors on iPhones, a switch doesn't seem like a bad idea.
In the long run, Apple's chips could mean the end of the "Hackintosh," which is basically a Windows PC packed with macOS-compatible hardware that is able to run macOS after some user hacks. The System Management Controller in the T2 is able to identify when it's running on non-Apple hardware, and if Apple requires a T2 validation in macOS after it spreads across the entire line, it could release an OS that simply won't run without the technology.
For example, the T2 chip physically disables the microphone when a laptop lid is closed, effectively defeating potential remote surveillance hacks.
"All Mac portables with the Apple T2 Security Chip feature a hardware disconnect that ensures that the microphone is disabled whenever the lid is closed. This disconnect is implemented in hardware alone, and therefore prevents any software, even with root or kernel privileges in macOS, and even the software on the T2 chip, from engaging the microphone when the lid is closed," Apple says.
Onboard cameras are left untouched, however, as Apple notes a closed lid also completely obscures that component's field of view.
Adorama also will not collect sales tax on orders shipped outside NY and NJ, and each system ships for free within the contiguous U.S. With the exclusive discount, many shoppers outside those two states can save up to $635 compared to buying from Apple, a significant cost savings for the brand-new models.
Those looking to finance the purchase can also take advantage of no interest financing when paid in full within 12 months using the Adorama Credit Card. For help redeeming the coupon code, please see the step-by-step instructions found in this guide.
Editor's note: This piece first ran shortly after the MacBook Pro added the T2 chip. However, given its inclusion in the new MacBook Air and Mac mini, a refresher is in order. The article also includes new information from Apple regarding the T2's capabilities.
First off, the T2 is an upgrade from the T1 that launched inside the 2016 MacBook Pro. The T1 chip's main purpose was running the System Management Controller (SMC), and the Touch ID sensor within the Touch Bar. A Secure Enclave co-processor handles encryption of fingerprints, and plays a gatekeeper to microphone and FaceTime HD camera access.
The newer T2 takes care of the exact same tasks as the T1, but adds an image signal processor, audio controller, and a mass storage controller that includes a dedicated AES engine for encryption.
Apple says the image signal processor works with the FaceTime HD camera to enable enhanced tone mapping, improved exposure control, and face-based auto-exposure, as well as automatic white balancing. As you can see in our video, white balancing is indeed much better, exposure is improved, and the detail in hair and eyes no longer gets crushed by dark shadows.
We've also noticed a pretty big difference in microphone quality, thanks to the T2's audio controller, which processes signals that ultimately end up at the MacBook's stereo speakers. That probably contributes to the better sound output found in this year's MacBook Pro models. On top of that, the T2 chip adds "Hey Siri" support.
Thanks to the new SSD controller, the T2 automatically encrypts your drive regardless of whether you have FileVault on or not. Apple recommends that you do enable it, however, for added security. Without FileVault, your encrypted SSDs will automatically mount and decrypt without a password when connected to your Mac.
The T2's encryption uses dedicated Apple-designed silicon instead of a third-party processor. There are two benefits to this, the first being the fact that your data never reaches the Intel processor, so it's more secure. The second is that by using dedicated hardware, there's no effect on SSD performance.
After enabling FileVault on the 2017 MacBook Pro, which lacks the T2, we were told we would have to wait a full day for encryption to finish -- and that if we suddenly decided against it, we wouldn't be able disable it until the process was complete. Even once it finished, storage read speeds dipped significantly.
On the 2018 MacBook Pro enabling FileVault is instantaneous, with no change in subsequent speeds at all.
The biggest security enhancement may actually be Secure Boot. This makes sure that only a legitimate, trusted operating system loads at startup. By default it's in Full Security mode, allowing only your current OS or signed OS software trusted by Apple to run. It also disallows booting from external media, such as USB or Thunderbolt drives.
This offers huge protection from hackers who could potentially boot into a different operating system in order to steal your data. Although not recommended, you can change these settings within macOS Recovery mode.
Since Apple's custom T-series chips are integrating an increasing number of system controllers, it may be making it easier than ever for Apple to switch over to their own line of processors and ditch Intel for good. And seeing as Intel has once again delayed delivery of their 10-nanometer processors, an architecture Apple has been on for over a year with its A-series processors on iPhones, a switch doesn't seem like a bad idea.
In the long run, Apple's chips could mean the end of the "Hackintosh," which is basically a Windows PC packed with macOS-compatible hardware that is able to run macOS after some user hacks. The System Management Controller in the T2 is able to identify when it's running on non-Apple hardware, and if Apple requires a T2 validation in macOS after it spreads across the entire line, it could release an OS that simply won't run without the technology.
Apple's T2 Overview
To coincide with 2018's MacBook Air and Mac mini refreshes, Apple published a T2 Security Chip Overview (PDF link) detailing the Mac-specific hardware feature. While much of the white paper is a retread of information made available through Apple's own marketing materials, there are a few nuggets that offer insight into lesser known capabilities.For example, the T2 chip physically disables the microphone when a laptop lid is closed, effectively defeating potential remote surveillance hacks.
"All Mac portables with the Apple T2 Security Chip feature a hardware disconnect that ensures that the microphone is disabled whenever the lid is closed. This disconnect is implemented in hardware alone, and therefore prevents any software, even with root or kernel privileges in macOS, and even the software on the T2 chip, from engaging the microphone when the lid is closed," Apple says.
Onboard cameras are left untouched, however, as Apple notes a closed lid also completely obscures that component's field of view.
Save up to $350 on every 2018 MacBook Pro
Apple authorized reseller Adorama is knocking up to $150 off every 2018 13" Touch Bar and up to $350 off every 2018 15-inch MacBook Pro with instant rebates and promo code APINSIDER when used with this shopping link or the pricing links in our Mac Price Guide.Adorama also will not collect sales tax on orders shipped outside NY and NJ, and each system ships for free within the contiguous U.S. With the exclusive discount, many shoppers outside those two states can save up to $635 compared to buying from Apple, a significant cost savings for the brand-new models.
Those looking to finance the purchase can also take advantage of no interest financing when paid in full within 12 months using the Adorama Credit Card. For help redeeming the coupon code, please see the step-by-step instructions found in this guide.
Comments
I expect the T3, T4, etc to integrate more features as time goes on - major third party controllers in a MacBook or iMac at the moment include:
* Wifi
* Bluetooth
* Thunderbolt
* Trackpad/Touch
* LTE / 5G
* Other CPU/SouthBridge I/O (Audio done, Security done, SSD controller done, USB 3.2 next?)
* GPU
* CPU
But Apple will only do that which is worthwhile for their needs.
A pro laptop or desktop grade Apple chip, if they were to create one, would likely be given a new naming scheme. "X1" or "F1" or similar.
It'll be an amalgam of the latest A chip (CPU, GPU, I/O, Memory Controller), the latest T chip (security, SSD, additional internal I/O - most of this is already in the A chip TBH), additional PCIe support (x16), and an uncore suitable for desktop bandwidths and loads.
we’ve discussed this numerous times. Is it a Mac if it can’t run native Mac software? No, it isn’t. It like Microsoft’s work. They have “Windows” running on an ARM chip, but the software needs to be recompiled and fixed before it can run. It’s not really Windows.
so Apple maybe has macOS running natively, and a few of its apps. But what about everything else? It took well over a year to get Office, Photoshop and other major apps working, including Apple’s own, when they went to x86. Again when they went to 64 bits.
emulation on the same chip family from a different OS isn’t a performance problem, but when coming from a different chip family, it is. It’s as though people totally forgot all the problems in emulating Windows software on a ppc machine, with it running dog slow, at about 20% of the speed. That was using powerful ppc CPUs.
this isn’t a simple thing. I read every year, when a new A series comes out that we can expect Apple to move soon. But it hasn’t happened because it’s not practical yet.
It's on the other side towards the middle just passed the fan, /nit picked :P
Apple is going step by step.
Software is key. See current step.
In 10.14 developers got tools to much easier port iOS apps to macOS.
Apple want to make macOS more familiar for hundreds of millions of iOS users. Big chunk are Windows users.
Give them apps they are familiar with.
So we can speculate Apple is heading to frontline attack on mainly notebook market. Maybe desktop one as well. But probably higher end.
One of its step can be apps containing code for intel and arm. Or better when you install app you will download only appropriate binary.
When you will have ported your app for 10.14 you have huge amount of work done.
So dual binary apps can be part of 10.15 or 16. Just logical step.
And now one my pure speculation as I have no knowledge here. Is it possible that any chip like T3-4 chip could help with code translation/emulation as it is helping with encryption? Then who cares about CPU architecture?
but not when running macOS.
all Mac development hasn’t stopped. Seriously, think a little harder about what’s happening. Apple is going all out with AI. Intel’s chips are constantly delayed. Instead of coming out with updates, Apple waits for the wanted chips to appear. This delays development. There’s no evidence that all Mac development has ended. I know this is a popular theme, but it isn’t correct. What they’re doing with the Mini isn’t know. But that just one line.
and stop using the word “rational”. I see a coup,e of guys are now usi g that word as though it has meaning here. It doesn’t. It just has meaning to you. You don’t know hat rational upgrade means to Apple.
Ugh! Stop pretending that because you don’t know something, because y;use not thinking about it in the proper context, that it gives room to do something that it may not be able to do.
clock speeds aren’t infinitely extendable. When Apple upped its clocks a few years ago, it was a shock. The designers they were using didn’t allow for such high clocks. Obviously, according to chip experts, they changed the design to allow it. But in doing that, they limited clock increases for the future. The designs they use are specifically made for low power. They can’t be extended much to, say 15, or higher wattage, without extensive redesign. If they do that, they change from what it is now, to something else. I’ve been saying that that’s what they would have to do.
you gloss so easily over the concept of software on ARM, that obviously you haven’t given it any real thought. Advocates for macOS ARM machines seem to do this. It’s not a minor issue, it’s the entire issue. You ywant to dismiss it as though it doesn’t matter, but it does. We have no idea whether big software developers would want to do another very expensive changeover the way they did in the past. If you think they will, then you are making an assumption you have no right to make.
the ppc was a powerful chip in integer performance. The problem was that in the end, Motorola stopped meaningful development, and it fell way behind. When x86 has twice the clockspeed, there was no way it could compete. But we’re talking competition at the top end. The A series, despite wishing and hoping, is nowhere near that level. It competes directly against Intel’s ultra low power mobile chip lines pretty well. But it doesn’t against their low power lines, and not even close when talking Desktop lines at far greater power levels.
Its known that a chip emulating another chip needs to be 5 times faster to equal the performance. 5 times. That why the best that could be done with Virtual Pc was a 20% performance level, and that was before Intel rapidly increased clocks when they began the Netburst architecture. Before that, the performance was about 30% faster in integer, and almost 50% faster in float. That’s not including the special instruction set of Alti-vec.
Rumors mean nothing. That there have been rumors for two years only reflects the wishes of those starting the rumors.
we don’t know what Apple is thinking about the Mini. That’s been gone over in my above post already. You brought it up twice now.
I don't know when it's going to happen but Apple will one day produce their own laptop/desktop CPU SoC line of high-end 64bit ARM-based RISC processors that will be heavily customized for Apple's unique needs. They will use a lot less power and will move to smaller nanoscales as that will mean even more efficiency leading to greater performance and more battery savings. The size of the system boards will continue to shrink.
A glimpse of what is coming:
--------------------------------
What if you could have a MacBook Pro with 128 CPU cores, superfast Optane like nonvolatile RAM/SSD, and still have all day battery life considerably better than what is available today with the MacBook Air? How would you like 18-24 hours of battery life? Intel's breakthrough with Optane means it's fast enough to be main system RAM yet behave like Flash but without the limitations of Flash such as slow writes unless it's erased first and a limited number of writes. Yes, it's out there now with Intel SSD Optane technology and Intel is going to be releasing Optane RAM soon. Suddenly, the need for super fast RAM and slow storage goes away. You merge storage and RAM and redesign the OS to handle it. Perhaps simply allocated a portion of the storage as RAM and the rest as storage. No need to hibernate nor sleep you just power off and back on with instant resume. Who has the resources to integrate that technology at the hardware and OS level? Apple, that's who. Watch, it will happen in the coming years. Supercomputers in your backpack will become a reality. Plenty of room for new and fascinating breakthroughs to come.
Who knows what's going to happen but rest assured, Apple is playing a long game and is not aiming at today but shooting for stars in the distant future. Today you can get CPU's with 32 cores intended for servers. It's not a big leap to hit 5 nanoscale and super efficient SoC designs that can produce 128 cores and do it far better than Intel who is trapped in x86-64 CISC designs vs much more efficient ARM RISC designs. Who is to say Apple has to stick with ARM designs, they can literally break the mold and do something new. They optimized teh ARM designs stripping out everything but the kitchen sink to ditch legacy junk.
we don’t need, and don’t want 128 cores in a Macbook Pro. What for? Those cores will use a lot of power no matter what, and will be sitting idle 99.9% of the time.
about Optane. It’s not as fast as RAM. Maybe someday we’ll out there, it might be, but that day is well off. Right now, Optane is fast enough to be used as a secondary memory subsystem, but not for main RAM usage. Maybe you should read up on this before wildly going with the premise.
nobody even knows yet if 5nm is doable. Intel even removed it from their roadmap. ARM, like x86, is a combination of CISC as well as RISC.
it was fun reading it, but well...