3.2.1.29 Ensure 'Show Notification Center in Lock screen' is set to 'Disabled'

Information

This recommendation pertains to the display of Notification Center on the lock screen.

Rationale:

Communications between the operating system and apps to a user should be controlled to prevent data leakage or exploitation. For example, some two-factor authentication apps will present to the notification center on lock screen the option to allow a login from a new device.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the Restrictions tab.

In the right windowpane, under the tab Functionality, uncheck the checkbox for Show Notification Center in Lock screen.

Deploy the Configuration Profile.

Additional Information:

The per-app notification settings described later in the benchmark can be used in lieu of disabling Notification Center at the lock screen. This should only be done if there is confidence that all apps producing sensitive notifications can be managed.

See Also

https://workbench.cisecurity.org/files/3064