Detections
Analytics

1.129 APPL-14-003060

Information

The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character.

GROUP ID: V-259550RULE ID: SV-259550r1038909

The macOS be configured to require at least one lowercase character and one uppercase character be used when a password is created.

This rule enforces password complexity by requiring users to set passwords that are less vulnerable to malicious users.

Note: The guidance for password-based authentication in NIST 800-53 (Rev 5) and NIST 800-63B state that complexity rules should be organizationally defined. The values defined are based on common complexity values, but an organization may define its own password complexity rules.

Note: The configuration profile generated must be installed from an MDM server.

Satisfies: SRG-OS-000069-GPOS-00037,SRG-OS-000070-GPOS-00038

Solution

Configure the macOS system to require at least one lowercase character and one uppercase character in password complexity by installing the "com.apple.mobiledevice.passwordpolicy" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/24070

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000192, CCI|CCI-000193, CCI|CCI-004064, CCI|CCI-004066, Rule-ID|SV-259550r1038909_rule, STIG-ID|APPL-14-003060, Vuln-ID|V-259550

Plugin: Unix

Control ID: e3410c8b09e58f982606eecf9b240ca7c787d3d9e523df5c6fb024a6080bac00