Specifics of refurbishment process

I am looking to purchase a refurbished iMac. Before I do, I would like to know what the refurbishment process performed at Apple entails ( i.e. when the process is described as "rigorous" on the Apple Certified Refurbishment webpage, or "undergoes full functionality testing and any defective modules identified in testing are replaced", to what depth is this done? )? That is, if the previous owner had malicious intent, and had installed a backdoor into the refurbished device, at what level ( software, firmware, hardware ) might this implant this be discovered by your refurbishment process ( or, at what level would this be infeasible )? Specifically, are your products checked for malicious hardware implants, and if so, how ( i.e. do you verify that there are no “unknown” components inside the system, and if so, how? )? Is the firmware of each component in the system extracted and verified or a checksum performed with the OEM firmware, or re-flashed if not ( e.g. modifications to EEPROM, JTAG checks, etc. )? Is the BIOS/UEFI ROM, or any other part of the system checked for rootkits ( e.g. the Recovery HD volume, or any partitions of the storage )? Are there any other malware tests performed throughout your refurbishment process that would lead to the discovery and removal of any implants, and if so, what are they? Thank you for your time.

Posted on Feb 26, 2017 5:18 PM

Reply
Question marked as ⚠️ Top-ranking reply

Posted on Mar 11, 2017 8:58 AM

I spoke with a representative from Apple, who explained the refurbishment process in a bit more detail than what is exposed online. Essentially, the sub-components of the device are recycled ( besides the battery and casing ). The refurbished device is a composite of these recycled components. The refurbishment process entails 7 “quality assurance” tests in the subsequent stages of re-assembly of these sub-components, so we can reasonably assume no potential hardware implants from the previous owner that Apple doesn’t want to remain there ( and can detect ) make it through. All of these sub-components are flashed with OEM firmware before re-assembly, including that of storage media, which are also wiped. The serial numbers are also rewritten, apparently, so that the previous owner can’t track the product, for whatever reason they may have. So, assuming this is information is credible, one can assume these components are secure against tampering by any “average” owner. The questions in the original post have been answered; thank you all for your help.

12 replies
Sort By: 
Question marked as ⚠️ Top-ranking reply

Mar 11, 2017 8:58 AM in response to z190

I spoke with a representative from Apple, who explained the refurbishment process in a bit more detail than what is exposed online. Essentially, the sub-components of the device are recycled ( besides the battery and casing ). The refurbished device is a composite of these recycled components. The refurbishment process entails 7 “quality assurance” tests in the subsequent stages of re-assembly of these sub-components, so we can reasonably assume no potential hardware implants from the previous owner that Apple doesn’t want to remain there ( and can detect ) make it through. All of these sub-components are flashed with OEM firmware before re-assembly, including that of storage media, which are also wiped. The serial numbers are also rewritten, apparently, so that the previous owner can’t track the product, for whatever reason they may have. So, assuming this is information is credible, one can assume these components are secure against tampering by any “average” owner. The questions in the original post have been answered; thank you all for your help.

Reply

Feb 26, 2017 5:44 PM in response to z190

Apple does not publish the step by step process. However I can tell you first hand that you will not be able to tell an Apple Refurbished product from a new one. I am writing this on my 2011 27" iMac that has worked perfectly since day one. I also have a refurbished Mac mini (2012) that has also worked perfectly since I got it from Apple. Third, I had a MacBook Pro that was a refurb and it too was a great performer.


You won't find any downside to buying one.


You are assuming the machines are used, that isn't necessarily the case. It is common in retail to return stock for ANY reason down to a mark on the box that the computer comes in. Why would you even care, it comes with the same warranty as a new machine, is eligible for AppleCare which extends the warranty to 3 years and is virtually identical to a new machine.


By the way, Apple does not read or post on these forums we are all end users like yourself. They are simply the hosts of the forum.

Reply

Feb 26, 2017 6:30 PM in response to z190

Additionally, Apple allows you 14 days to return the device for any reason for a full refund. So, you can take it back if you don't like it. Remember though: you should not open the unit as the only parts user accessible are the RAM slots on 27" iMacs - anything else by anyone other than an authorized service technician will result in voiding your warranty.


FWIW, if you are that worried about malware or malicious hardware, I certainly would recommend not buying anything anywhere.

Reply

Feb 27, 2017 1:36 PM in response to z190

The specific refurbishment process is outlined on the Refurbished and Clearance Page of the website. Try this:


www.apple.com-->scroll down to Apple Store(Refurbished and Clearance), click on that link-->On that page, look for the link "Refurbishment Process" and click on that link.


That outlines the complete process.

Reply

Mar 5, 2017 1:37 PM in response to babowa

“FWIW, if you are that worried about malware or malicious hardware, I certainly would recommend not buying anything anywhere. “


I find this to be a rather dismissive and asinine comment, and unbecoming of the guidelines of this community forum. As a security conscious user, I would appreciate a constructive response to this question. Might there be an Apple discussion forum for the "authorized service technicians" you mentioned, that is, people who might actually perform this kind of “deep cleaning” on a day to day basis?

Reply

Mar 5, 2017 1:51 PM in response to rkaufmann87

Hello rkaufmann87,


Thank you for your reply. I am glad that your 2011 27" iMac, refurbished Mac mini (2012), and MacBook Pro have worked perfectly for you. Per your "Why would you even care" comment, I believe I stated my intent rather clearly in the original post ( the context of which is cybersecurity ). I would like to know, if the refurbished device was previously used, to what depth ( e.g. software, firmware, hardware ) is the integrity of the device verified? I am not sure whether or not you have had any previous experience with the processes mentioned above, but these can be rather tedious and time consuming, the further down one probes, which is why I am curious if Apple actually performs them during the refurbishment process. If this is something that may be unknown to users of this forum, might there be another forum whose members may know?

Reply

Mar 5, 2017 1:56 PM in response to z190

First: we do not work for Apple. We are fellow users who help with your use of Apple products. We are not privy to Apple's policies, nor are we allowed to ever speculate.


No there isn't another forum - at least that a consumer would be privy to. My comment was in response to a question which implied that you do not trust anything and it is clear that you do not. Although no one here works for Apple, I do not believe that they would no more reveal their refurbishment process as they would their design process for new devices.


So, as one of the consumers here, I am not aware of any way that you could oversee or investigate the process. There would also not be any other forum. And I will repeat my earlier comment with good intentions: if you do not trust their statements about the process, buying such a product is not a good idea because you will always wonder.

Reply

Mar 5, 2017 2:00 PM in response to IdrisSeabright

Hello IdrisSeabright,


Per the original post, my question was regarding the semantics of the information presented on this webpage: "I would like to know what the refurbishment process performed at Apple entails ( i.e. when the process is described as "rigorous" on the Apple Certified Refurbishment webpage, or "undergoes full functionality testing and any defective modules identified in testing are replaced", to what depth is this done? )? " Does "full functionality testing" mean testing for data integrity in the underlying firmware/software, or something else? In short, I am looking for a more detailed description of the refurbishment process than what is presented in the "Apple Certified Refurbished Products" webpage, and would like to know, if one may exist, where to find it?

Reply

Mar 5, 2017 2:09 PM in response to z190

There is no such forums.

These are it!

Like rkaufmann87 stated, there is no downside, AT ALL, purchasing a refurbished Apple Product.

They inspect and warranty as new and you have a 14 day return window if you find any issue with your refurbed Mac.

These refurbed products have had no issues with security.

Everyone on this post, including me, have many years of volunteering our knowledge in these forums and none of us have never seen any posts regarding any security issues or security breaches linked to purchasing Apple refurb computing products.

Your security concerns are overreaching and really should NOT be of concern.

Unless, of course, you actually work for a government agency.


Purchase the refurb Mac you like and enjoy it when you get it.


Good Luck to You!

Reply

Mar 5, 2017 2:35 PM in response to z190

z190 wrote:


Hello IdrisSeabright,


Per the original post, my question was regarding the semantics of the information presented on this webpage: "I would like to know what the refurbishment process performed at Apple entails ( i.e. when the process is described as "rigorous" on the Apple Certified Refurbishment webpage, or "undergoes full functionality testing and any defective modules identified in testing are replaced", to what depth is this done? )? " Does "full functionality testing" mean testing for data integrity in the underlying firmware/software, or something else? In short, I am looking for a more detailed description of the refurbishment process than what is presented in the "Apple Certified Refurbished Products" webpage, and would like to know, if one may exist, where to find it?

As I don't work for Apple (almost no one in these forums does), all I can do is refer you to the relevant documentation. I do not have anymore ability to interpret it than do you. I do however, probably have less interest in the answers than you do. I have purchased a refurbished MacBook Air now in it's sixth year of use so I don't feel much more need for clarification than that.

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Specifics of refurbishment process

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.