2.2.1 Enable 'Set time and date automatically'

Information

Kerberos may not operate correctly if the time on the Mac is off by more than 5 minutes. This in turn can affect Apple's single sign-on feature, Active Directory logons, and other features.

Solution

Perform the following to implement the prescribed state:
1. Open System Preferences
2. Select Date & Time
3. Select Set date and time automatically

Alternatively run the following commands:
sudo systemsetup -setnetworktimeserver <timeserver>
sudo systemsetup -setusingnetworktime on

See Also

https://workbench.cisecurity.org/files/300

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-8(1), CSCv6|6.1

Plugin: Unix

Control ID: ce63a355dcb90e9367aecbaa8d1a8a245a5c3ada055474d29c6adf42aea47c81