Detections
Analytics

1.154 APPL-15-005100

Information

The macOS system must ensure Secure Boot level is set to "full".

GROUP ID: V-268568
RULE ID: SV-268568r1034644

The Secure Boot security setting must be set to "full".

Full security is the default Secure Boot setting in macOS. During startup, when Secure Boot is set to full security, the Mac will verify the integrity of the operating system before allowing the operating system to boot.

NOTE: This will only return a proper result on a T2 or Apple Silicon Macs.

Satisfies: SRG-OS-000445-GPOS-00199, SRG-OS-000446-GPOS-00200, SRG-OS-000447-GPOS-00201

Solution

Configure the macOS system to ensure Secure Boot level is set to "full" by booting into Recovery Mode and enabling Full Secure Boot.

See Also

https://workbench.cisecurity.org/benchmarks/23761

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-6a., 800-53|SI-6b., 800-53|SI-6d., CCI|CCI-002696, CCI|CCI-002699, CCI|CCI-002702, Rule-ID|SV-268568r1034644_rule, STIG-ID|APPL-15-005100, Vuln-ID|V-268568

Plugin: Unix

Control ID: 2c9c006de951b1af46380111cb5dba442e27b63a5f71a2b3ee6c5241c5a81e21