Detections
Analytics

Monterey - Disable Unlock with Apple Watch During Setup Assistant

Information

The prompt for Apple Watch unlock setup during Setup Assistant _MUST_ be disabled.

Disabling Apple watches is a necessary step to ensuring that the information system retains a session lock until the user reestablishes access using an authorized identification and authentication procedures.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.SetupAssistant.managed:
 SkipUnlockWithWatch:
 True

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-20, 800-53|CM-7a., CCE|CCE-91002-6, CCI|CCI-000381

Plugin: Unix

Control ID: 3286f9427ea9591776676b39a64641acab0545458115449d389a37380fecd2a4