Detections
Analytics

1.97 APPL-14-002090

Information

The macOS system must disable TouchID for unlocking the device.

GROUP ID: V-259517RULE ID: SV-259517r958400

TouchID enables the ability to unlock a macOS system with a user's fingerprint.

TouchID must be disabled for "Unlocking your Mac" on all macOS devices that are capable of using TouchID.

The system must remain locked until the user establishes access using an authorized identification and authentication method.

Solution

Configure the macOS system to disable TouchID for unlocking the device by installing the "com.apple.applicationaccess" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/24070

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11b., CAT|II, CCI|CCI-000056, Rule-ID|SV-259517r958400_rule, STIG-ID|APPL-14-002090, Vuln-ID|V-259517

Plugin: Unix

Control ID: dc02bf7855710e977584fcef0812677544afc89175772f4e29a0dc8358008673