Erase Assistant Question

[D1G1TALR0B0T]

Hey all,

Just a quick question about Erase Assistant.
I know on a T2 or Apple Silicon based Mac you can easily use the Erase Assistant to preform a factory reset.
I was just wondering if FileVault was not enabled is it still a fully secure erase with Erase Assistant?

Thanks.

 

[mystery hill]

I was just wondering if FileVault was not enabled is it still a fully secure erase with Erase Assistant?

Yes, the Secure Enclave will securely delete the volume encryption key when using the Erase Assistant, even if FileVault was not enabled. The volume and data are rendered cryptographically inaccessible.

 

[D1G1TALR0B0T]

Yes, the Secure Enclave will securely delete the volume encryption key when using the Erase Assistant, even if FileVault was not enabled. The volume and data are rendered cryptographically inaccessible.

Thanks for your reply and that is good to know.
I wasn't sure if the way T2 encrypts (without FileVault) would have been enough for a secure erase as it I think that it is based on the hardware ID.