セキュリティ・ロック解説ガイド
端末セキュリティ完全ガイド10 min readUpdated October 2026

iCloudアクティベーションロック完全解説: CleanとLostの違いと中古購入リスク

Appleのアクティベーションロックに関する詳細な技術解説。CleanとLostモードの違い、サーバー同期の仕組み、購入前の確実な確認方法。

結論と直接の回答

Summary Definition

iCloud Activation Lock is a cryptographic security protocol that permanently pairs an Apple device hardware identifier (UDID and serial number) with an owner's Apple ID on Apple central activation servers (albert.apple.com). A Clean status signifies Find My is enabled without an active theft report, while Lost Mode remotely locks the screen with custom recovery text and disables Apple Pay. Neither status can be permanently bypassed without original owner credentials or verified authorized invoice documentation.

Prefer an interactive visual carousel?View Web Story

重要ポイントと要約

  • Activation Lock is enforced in the cloud on Apple activation servers, not locally inside iOS software partitions.
  • Clean mode devices remain completely unusable if you do not possess the owner credentials or proof of purchase.
  • Lost Mode indicates the original owner flagged the hardware as lost or stolen in iCloud, locking local keys and Apple Pay.
  • Software bypass utilities only modify local setup daemons; any iOS update, reboot, or factory reset immediately re-locks the device.

技術アーキテクチャとシステム動作の仕組み

技術アーキテクチャとシステムセキュリティ検証の仕組み

現代のスマートフォンのセキュリティは、セキュアブートチェーンと暗号化ハードウェア(Secure Enclave等)に直接組み込まれています。アクティベーション検証は公式中央サーバーで実行されるため、端末側のローカルな改変で正式なステータスを変更することは不可能です。

The Activation Handshake Protocol (技術アーキテクチャとシステム動作の仕組み)

Whenever an iPhone is erased or powered on in an unconfigured state, the iOS Setup Assistant (Setup.app) initializes a secure TLS handshake with Apple activation gateway (albert.apple.com). The device generates an Activation Request Token comprising its unique chip serial (ECID), International Mobile Equipment Identity (IMEI), Serial Number, and Secure Enclave cryptographic public key. Apple activation servers query their internal database to determine if Find My iPhone (FMI) is active for that hardware identifier.

Cryptographic Difference: Clean Mode vs Lost Mode (技術アーキテクチャとシステム動作の仕組み)

If Find My is enabled without a user incident report, the server returns an Activation Record indicating 'Clean'. The device is instructed to demand the existing Apple ID email and password. If the owner logs into iCloud.com and flags the device as lost, Apple servers immediately set 'lostModeEnabled=true'. When the device pings the server, it receives a cryptographic Lost Mode payload that disables Apple Pay tokens in the Secure Element, initiates real-time location telemetry, and locks the screen with custom emergency contact text.

Why Local Software 'Bypasses' Are Fundamentally Flawed (技術アーキテクチャとシステム動作の仕組み)

Unauthorized desktop unlock tools exploit bootrom vulnerabilities (such as checkm8 on legacy A-series chips) or local ramdisk injection to delete or patch Setup.app, MobileActivation.framework, or local activation plists. However, because the device's hardware UDID remains flagged on Apple activation servers, the phone never receives a legitimate signed FairPlay activation ticket. Cellular baseband communication is disabled, Apple Push Notification service (APNs) fails, iCloud sync is blocked, and any subsequent reboot or OTA firmware update restores stock partitions and re-locks the device.

状態別の詳細比較マトリックス

端末状態とシステム挙動の詳細比較マトリックス

ステータス状態クラウドサーバー記録端末側の挙動正式な解決策
Clean ModeFMI ON (No Police/Theft Report)Stalled at 'iPhone Locked to Owner' screenOriginal owner enters Apple ID or removes via iCloud.com
Lost ModeFMI ON (Marked Stolen/Lost)Locked screen displaying owner message and phone numberOriginal owner signs into Find My and turns off Lost Mode
Server UnlockedFMI OFF (Clean Server Record)Standard 'Hello' welcome screen; full normal setupDevice is fully clear and ready for immediate permanent ownership
Bypass ExploitedFMI ON (Local plist modified)Temporary home screen access; baseband and APNs disabledNone; device re-locks permanently upon first reset or iOS update

ステップ別・実践確認プロトコル

Physical & software diagnostics before purchase

1

Demand an On-the-Spot Factory Reset

Never purchase an Apple device already resting on the home screen without witnessing a full factory erasure.

Go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. If the device asks for an Apple ID password to turn off Find My, the seller must enter it immediately. If they claim they 'forgot the password' or refuse, walk away immediately.

2

Complete Setup Assistant to Home Screen

Advance through the setup wizard until you reach the home screen using your own Apple ID or choosing 'Set Up Later'.

Connect to Wi-Fi or cellular hotspot during setup. The device will communicate with Apple activation servers. If the phone is locked, it will immediately display 'iPhone Locked to Owner'. Do not pay the seller until you successfully reach the working Springboard home screen.

3

Cross-Reference Physical IMEI with Internal Settings

Ensure the hardware chassis has not been swapped to disguise a locked logic board.

Dial *#06# on the Phone keypad to view the electronic IMEI. Compare this 15-digit number against the IMEI laser-engraved on the SIM tray or rear glass and the Settings > General > About menu. Any discrepancy indicates casing tampering or stolen board transplantation.

4

Perform an Authoritative Cloud Database IMEI Query

Check the real-time Find My iPhone (FMI) status directly against official carrier and Apple server records.

Input the device IMEI into an online verification tool to confirm FMI Status: OFF and iCloud Status: CLEAN before exchanging funds. This verifies that no pending server-side locks or insurance claims exist.

実際の購入者トラブル事例

A consumer purchases a pristine iPhone 15 Pro Max advertised as 'fully working and unlocked' on a peer-to-peer marketplace. After meeting in person and exchanging $750 cash, the buyer attempts to insert their SIM and set up the device at home. The iOS Setup Assistant abruptly halts at the 'iPhone Locked to Owner' screen, requesting the password for an obscured Apple ID (j*****@gmail.com). When contacting the seller, the buyer finds the listing deleted and their phone number blocked. Because Activation Lock is enforced on Apple cloud servers, the buyer now owns an unusable paperweight.

中古端末市場の一般的な取引リスクに基づく実例シナリオです。

実際のリスクと重大な影響

Complete device bricking: An Activation Locked iPhone cannot navigate past the initial setup wizard to access the home screen, cellular radio, App Store, or iCloud services.

Total loss of monetary investment: Third-party bypass scripts only patch local plists temporarily; the device will re-lock instantly upon restarting, updating iOS, or resetting.

中古取引の危険信号と出品者の手口

Deceptive seller tricks observed on peer-to-peer marketplaces

The 'DNS Bypass' or 'Demo Mode' Trick

Dishonest marketplace sellers configure a custom manual Wi-Fi DNS IP (such as iCloud DNS bypass servers) that routes the device to a simulated browser portal resembling an unlocked iPhone home screen.

Red Flag: The phone requires you to stay connected to a specific Wi-Fi network, and opening system Settings or Camera opens a web browser frame instead of native iOS applications.

The 'Phishing SMS After Sale' Extortion Scheme

Criminals who steal an iPhone will sell it cheaply or target the victim whose phone was stolen by sending fake Apple SMS messages stating 'Your lost iPhone was located, log in here to view location', tricking the victim into entering their Apple ID password.

Red Flag: Any seller claiming they have a 'special software unlock' or instructing you never to reset or update the device.

購入者保護とトラブル時の対処法

購入者保護とトラブル時の対処法

If you inadvertently purchased an Activation Locked iPhone, Apple customer support will not remove the lock unless you provide the original proof of purchase from an authorized Apple reseller containing the exact serial number and matching transaction receipt. Marketplace invoices (from eBay, Facebook, OfferUp) are categorically rejected. If the seller refuses a refund, file an immediate payment dispute with your payment provider (PayPal Goods & Services, credit card chargeback) for 'item not as described / counterfeit / unusable merchandise', and submit a formal police report for stolen property.

購入前の必須チェックリスト

  1. 1

    Mandate that the seller navigates to Settings > Apple ID and signs out completely in front of you.

  2. 2

    Perform a full 'Erase All Content and Settings' and activate the device using your own personal Apple ID.

  3. 3

    Run an official IMEI check to verify that Find My iPhone is OFF on Apple central databases before handing over cash.

代金を支払う前に必ず確認

IMEI制限、Appleアクティベーションロック、MDM管理、ネットワーク利用制限を即時照会します。

端末セキュリティを今すぐ確認

よくある質問 (FAQ)

What is the technical difference between Clean and Lost mode in iCloud lock?

Clean mode indicates that Find My is enabled on the device, but the registered owner has not reported the hardware as lost or stolen in their iCloud console. The device requires the original owner's Apple ID credentials to reactivate after an erase. Lost Mode means the owner actively marked the device lost via Find My, causing Apple servers to push a remote cryptographic lock payload that disables Apple Pay, displays a custom contact message on the screen, and enables background location telemetry.

Can Apple Store staff remove iCloud Activation Lock for a second-hand buyer?

No. Apple strictly enforces customer data privacy and anti-theft security policies. Apple will only remove Activation Lock if presented with official, verified proof of purchase originating from an authorized Apple retailer or Apple Store that explicitly details the device serial number, original purchaser name, and transaction date. Second-hand receipts, handwritten bills of sale, and eBay or Facebook Marketplace invoices are never accepted by Apple support.

What happens if I update iOS on an iPhone that has a software bypass?

The device will immediately re-lock and become unusable. Software bypass tools operate by deleting or modifying local setup files (Setup.app) on the device's storage partition. An Over-The-Air (OTA) iOS update or computer restore flashes fresh, cryptographically signed system files, replacing the modified files with stock Apple code. Upon booting, the system queries Apple activation servers, detects the active iCloud lock, and displays the 'iPhone Locked to Owner' screen.

Can an IMEI check reveal iCloud lock status before I meet the seller?

Yes. An authoritative IMEI check queries Apple GSX and carrier activation gateway records in real time. It returns the exact Find My iPhone (FMI) status (ON or OFF) and iCloud status (Clean or Lost). Checking the IMEI before meeting the seller ensures you do not waste time or travel for a device that is permanently locked to another user's account.

Does restoring an iPhone through Recovery Mode or DFU Mode remove Activation Lock?

No. DFU (Device Firmware Update) mode and Recovery Mode completely erase the flash storage and reinstall iOS firmware, but they cannot alter Apple server records. Once the fresh firmware is installed and boots to the setup screen, the device must connect to the internet to activate. Apple activation servers identify the hardware serial number and enforce Activation Lock immediately.

How can an original seller remotely remove Activation Lock if they forgot to sign out before shipping?

The original owner does not need physical possession of the device to remove the lock. They can log into icloud.com/find from any web browser, select the device from the 'All Devices' dropdown menu, choose 'Erase iPhone' (if not already erased), and then click 'Remove from Account'. Once removed from their account, the buyer can restart the iPhone and proceed with setup without entering the previous owner's credentials.

セキュリティ・ロック解説ガイド

公式情報源と業界規格