What is trustdFileHelper?

trustdFileHelper works alongside trustd, the certificate trust daemon.

What is trustdFileHelper?

trustdFileHelper handles file operations for the trust system. While trustd decides whether certificates are valid, trustdFileHelper reads and writes the trust data stored on disc: certificate trust settings, revocation data, and trust policy files.

What does it do?

The helper handles:

• Reading and writing certificate trust settings to disc
• Managing the local certificate store
• Updating revocation data
• Saving trust overrides when you manually trust or distrust a certificate

Why is it separate from trustd?

Splitting file operations into a separate helper is a security measure. trustd is sandboxed and handles trust logic. trustdFileHelper has the specific file system permissions needed to read and write trust data. This limits the damage if either process is attacked.

Does it use many resources?

No. It handles file operations for trustd and is mostly idle between certificate checks.

Should you worry?

No. It is a normal macOS security process that manages certificate trust data behind the scenes.

Enjoyed this post?

Well, you could share the post with others, follow me with RSS Feeds and/or send me a comment via email.

Tags