AIOS-02-080104 - Apple iOS must implement the management setting: require password when connecting to AirPlay device for the first time.


When a user is allowed to use AirPlay without a password, there is the potential that it may mistakenly associate the Apple iOS device with an AirPlay-enabled device other than the one intended (i.e., by choosing the wrong one from the AirPlay list displayed). This creates the potential that someone in control of a mistakenly associated device may obtain DoD-sensitive information without authorization. Requiring a password before such an association mitigates this risk. Passwords do not require any administration, nor must they comply with any complexity requirements.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Install a configuration profile to require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

See Also

Item Details


References: 800-53|AC-20(3), 800-53|CM-6b., CAT|III, CCI|CCI-000366, CCI|CCI-002338, Rule-ID|SV-86471r1_rule, STIG-ID|AIOS-02-080104, Vuln-ID|V-71847

Plugin: MDM

Control ID: 9988c02970dfe889d31612356e356e160c345b74bb11a9772f74e6a4d0eceb26