Ensure Backup Automatically is Enabled If Time Machine Is Enabled

MediumLevel 2Automatedmacos

Description

Backup solutions are only effective if the backups run on a regular basis. The time to check for backups is before the hard drive fails or the computer goes missing. In order to simplify the user experience so that backups are more likely to occur, Time Machine should be on and set to Back Up Automatically whenever the target volume is available. Audit: Passes when Time Machine is not configured (preference not set) or AutoBackup is enabled.

How it is checked

Audit method: Shell command

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.TimeMachine').objectForKey('AutoBackup'))
  if ( pref1 == null || pref1 == 1 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Expected output: true

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.MCX.TimeMachine AutoBackup = <true/>. GUI: System Settings > General > Time Machine > Options > Set Back up frequency to Automatically <every hour/every day/every week>.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.4.1 Ensure Backup Automatically is Enabled If Time Machine Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos --level 2