Check Disk Image For Broken Seal

No Question, this is something not easy to find, wanted to post this for others:


hdiutil attach -nomount DiskImage.dmg

diskutil apfs list 


Disk Image Sealed (in Bold, the rest displayed are not sealed):

...

|   +-> Volume disk3s2 EFF9D253-C98F-4E53-BD15-FA2AA6612BD9

|   |   ---------------------------------------------------

|   |   APFS Volume Disk (Role):   disk3s2 (System)

|   |   Name:                      Macintosh HD (Case-insensitive)

|   |   Mount Point:               Not Mounted

|   |   Capacity Consumed:         9073623040 B (9.1 GB)

|   |   Sealed:                    Yes

|   |   FileVault:                 No

...


Disk Image Broken (in Bold):

...

    +-> Volume disk8s1 95CC4718-93CB-49A7-833B-5C5766C027CF

    |   ---------------------------------------------------

    |   APFS Volume Disk (Role):   disk8s1 (System)

    |   Name:                      Macintosh HD (Case-insensitive)

    |   Mount Point:               Not Mounted

    |   Capacity Consumed:         9074323456 B (9.1 GB)

    |   Sealed:                    Broken

    |   FileVault:                 No

...

Posted on Jun 19, 2025 9:45 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 19, 2025 3:39 PM

Cryptographically sealed - as Apple does with the System volume in modern macOS. Presumably this is a disk image or read-only volume signed to guarantee integrity.


Conversely, broken means the cryptographic hash tree has been invalidated or corrupted - although there are a few different possible causes for that, including unauthorized modification, corruption in the hash tree or metadata, or even mounting a read-only marked file system read-write (although I think that one only happens if a write is attempted).

Similar questions

6 replies
Question marked as Top-ranking reply

Jun 19, 2025 3:39 PM in response to BDAqua

Cryptographically sealed - as Apple does with the System volume in modern macOS. Presumably this is a disk image or read-only volume signed to guarantee integrity.


Conversely, broken means the cryptographic hash tree has been invalidated or corrupted - although there are a few different possible causes for that, including unauthorized modification, corruption in the hash tree or metadata, or even mounting a read-only marked file system read-write (although I think that one only happens if a write is attempted).

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Check Disk Image For Broken Seal

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.