AIOS-11-011500 - Apple iOS must implement the management setting: require a password when connecting to an AirPlay device the first time.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

When a user is allowed to use AirPlay without a password, there is the potential that it may mistakenly associate the Apple iOS device with an AirPlay-enabled device other than the one intended (i.e., by choosing the wrong one from the AirPlay list displayed). This creates the potential that someone in control of a mistakenly associated device may obtain DoD-sensitive information without authorization. Requiring a password before such an association mitigates this risk. Passwords do not require any administration, nor must they comply with any complexity requirements.

Solution

Install a configuration profile to require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apple_iOS_11_V1R4_STIG.zip