Detections
Analytics
AIOS-26-010400 - Apple iOS/iPadOS 26 must require a valid password be successfully entered before the mobile device data is unencrypted.
Information
Passwords provide a form of access control that prevents unauthorized individuals from accessing computing resources and sensitive data. Passwords may also be a source of entropy for generation of key encryption or data encryption keys. If a password is not required to access data, this data is accessible to any adversary who obtains physical possession of the device. Requiring that a password be successfully entered before the mobile device data is unencrypted mitigates this risk.Note: MDF PP requires a Password Authentication Factor and requires management of its length and complexity. It leaves open whether the existence of a password is subject to management. This requirement addresses the configuration to require a password, which is critical to the cybersecurity posture of the device.
SFR ID: FIA_UAU_EXT.1.1
Solution
Install a configuration profile to require a password to unlock the device.Configuration Profile Key: forcePIN
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_26_V1R2_STIG.zip
Item Details
Audit Name: MobileIron - DISA Apple iOS/iPadOS 26 v1r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-28, CAT|I, CCI|CCI-001199, Rule-ID|SV-278784r1150599_rule, STIG-ID|AIOS-26-010400, Vuln-ID|V-278784
Plugin: MDM
Control ID: a795343267bc97d1d16a13cc2761b5c0a6788773f1ffad58a4c298a70479b463