2.1.1 Ensure a 'Consent Message' has been 'Configured'

Information

This recommendation pertains to the configuration of a consent message shown at the time of a configuration profile installation.

Rationale:

In this section of the benchmark, recommendations are for devices that are owned by the end-user. They are voluntarily accepting the configuration profile and should be provided an explicit opportunity to consent.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the General tab.

In the right windowpane, under the heading Consent Message, insert an appropriate consent message.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/3064