SEP Information

Basic Information:

SEP (Secure Enclave) is the part of CPU which handles Data Protection, Touch-ID, Face-ID on A7 and newer devices.
SEP has its own OS called "SEP OS" which we have no control over, even with Checkm8.
You cannot boot/restore a device without a valid, signed SEP (at this stage) and restores will fail if a non-compatible SEP is used.

• Without a compatible SEP, you CANNOT downgrade.
• 12.4.4 SEP (A7/A8 devices) allows for downgrades to 11.3 and higher.
• 13.3 SEP (All other 64 Bit devices) allows for downgrades to 13.0 and higher.
• 13.3 SEP breaks Face-ID for relevant devices on any version lower then 13.3, Touch-ID however works fine all the way down to 13.0 (tested on a 6s).


• There is no current way to restore using an unsigned SEP, you also cannot save SHSH for SEP like we can with iOS verions
• If you have broken Touch-ID/Face-ID (e.g. Swapped homebuttons, swapped Face-ID module) you are still limited by SEP compatibility as SEP handles more then just Touch/Face-ID and a signed/compatible SEP is needed to boot/restore.