Detections
Analytics
AIOS-26-016900 - Apple iOS/iPadOS 26 must allow AirPrint feature: Disallow AirPrint to destinations with untrusted certificates.
Information
AirPrint allows the printing of sensitive DOD documents to non-DOD controlled printers, which may lead to the exposure of sensitive DOD information.SFR ID: FMT_MOF_EXT.1.2 #47
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Install a configuration profile to enable 'Disallow AirPrint to destinations with untrusted certificates'. This is a supervised-only control.Note: This control may not be configurable by some MDM products when 'Allow AirPrint' is disabled.
Configuration Profile Key: forceAirPrintTrustedTLSRequirement
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_26_V1R2_STIG.zip
Item Details
Audit Name: AirWatch - DISA Apple iOS/iPadOS 26 v1r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-278841r1151223_rule, STIG-ID|AIOS-26-016900, Vuln-ID|V-278841
Plugin: MDM
Control ID: 7a5bdbd4a0e8e1dea115640a8f088f274bc52df8ad5b46848f701f32379566df