<!--
{
  "availability" : [
    "macCatalyst: 13.0.0 -",
    "macOS: 10.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "Security",
  "identifier" : "/documentation/Security/SecCSFlags",
  "metadataVersion" : "0.1.0",
  "role" : "Structure",
  "symbol" : {
    "kind" : "Structure",
    "modules" : [
      "Security"
    ],
    "preciseIdentifier" : "c:@E@SecCSFlags"
  },
  "title" : "SecCSFlags"
}
-->

# SecCSFlags

Values that can be used in the `flags` parameter to most code signing functions.

```
struct SecCSFlags
```

## Overview

All of the bits in the [`SecCSFlags`](/documentation/Security/SecCSFlags) enumeration are reserved by Apple. If you set any bits not defined here, the behavior is undefined.

## Topics

### Initializers

[`init(rawValue:)`](/documentation/Security/SecCSFlags/init(rawValue:))

### Constants

[`kSecCSDefaultFlags`](/documentation/Security/SecCSFlags/kSecCSDefaultFlags)

No flags (use the default behavior).

[`considerExpiration`](/documentation/Security/SecCSFlags/considerExpiration)

Consider expired certificates invalid.

[`enforceRevocationChecks`](/documentation/Security/SecCSFlags/enforceRevocationChecks)

[`checkTrustedAnchors`](/documentation/Security/SecCSFlags/checkTrustedAnchors)

[`noNetworkAccess`](/documentation/Security/SecCSFlags/noNetworkAccess)

[`reportProgress`](/documentation/Security/SecCSFlags/reportProgress)

[`quickCheck`](/documentation/Security/SecCSFlags/quickCheck)

### Type Properties

[`applyEmbeddedPolicy`](/documentation/Security/SecCSFlags/applyEmbeddedPolicy)

[`matchGuestRequirementInKernel`](/documentation/Security/SecCSFlags/matchGuestRequirementInKernel)

[`stripDisallowedXattrs`](/documentation/Security/SecCSFlags/stripDisallowedXattrs)


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)