Detections
Analytics
APPL-15-003001 - The macOS system must issue or obtain public key certificates from an approved service provider.
Information
The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only approved trust anchors are in the System Keychain.Satisfies: SRG-OS-000403-GPOS-00182, SRG-OS-000775-GPOS-00230
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Configure the macOS system to issue or obtain public key certificates from an approved service provider by obtaining the approved certificates from the appropriate authority and install them to the System Keychain.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_15_V1R8_STIG.zip
Item Details
Audit Name: DISA Apple macOS 15 Sequoia STIG v1r8
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-23(5), CAT|II, CCI|CCI-002470, CCI|CCI-004909, Rule-ID|SV-268534r1268247_rule, STIG-ID|APPL-15-003001, Vuln-ID|V-268534
Plugin: Unix
Control ID: 18fcbc1e602bf0a7684167a04bac50d75d55bdb4f6e3f89c65d3778dcf0355f7