Detections
Analytics

Catalina - Enforce Enrollment in Mobile Device Management

Information

You _MUST_ enroll your Mac in a Mobile Device Management (MDM) software.

User Approved MDM (UAMDM) enrollment or enrollment via Apple Business Manager (ABM)/Apple School Manager (ASM) is required to manage certain security settings. Currently these include:
* Whitelisting Approved Kernel Extensions
* Privacy Preferences Policy Control Payload
* ExtensibleSingleSignOn

Solution

Ensure that system is enrolled via UAMDM.

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-2, 800-53|CM-6, CCE|CCE-84803-6

Plugin: Unix

Control ID: 0b4bece2ea7bcb65dd2050f4ed78038071d403a691ace70824980170203d106b