3.8.1 Ensure 'If Lost, Return to... Message' is 'Configured'

Information

This recommendation pertains to configuring a lock screen message.

Rationale:
A lock screen message will allow an honest by-stander to more easily return a lost device.
This message need not identify the owner by name, but should reference a phone number or email address to contact. Perhaps the help desk of the organization.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the Lock Screen Message tab.
4. In the right windowpane, in the 'If Lost, Return to...' Message field, configure an appropriate message.
5. Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/2141