Can you clarify Quinn if it is possible for a system extension to use/own a private (persistent) key via the secure enclave? As I keep running into one error after another? Are there official docs/examples on that? Ok found it... thanks to your resources: TN3137: On Mac keychain APIs and implementations | Apple Developer Documentation It requires data protection keychain, so not possible from system extension