Detections
Analytics
APPL-26-003001 - The macOS system must issue or obtain public key certificates from an approved service provider.
Information
The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only approved trust anchors are in the System Keychain.Satisfies: SRG-OS-000403-GPOS-00182, SRG-OS-000775-GPOS-00230
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Configure the macOS system to issue or obtain public key certificates from an approved service provider by obtaining the approved certificates from the appropriate authority and install them to the System Keychain.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_26_V1R4_STIG.zip
Item Details
Audit Name: DISA Apple macOS 26 Tahoe STIG v1r4
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-23(5), CAT|II, CCI|CCI-002470, CCI|CCI-004909, Rule-ID|SV-277143r1268247_rule, STIG-ID|APPL-26-003001, Vuln-ID|V-277143
Plugin: Unix
Control ID: 591b261c00f0adcfda971372fb1d61a0accc8067f4c8ffe54aa9a747b702e8fb