TMA-IOS-2.2.1.11
Ensure "Allow sending diagnostic and usage data to Apple" is set to "Disabled"
Description
Apple provides a mechanism to send diagnostic and analytics data back to them in order help improve the platform. This information sent to Apple may contain internal organizational information that should not be disclosed to third parties. Profile: Level 1 - End-User Owned Devices.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
From the Configuration Profile: Apple Configurator > Configuration Profile > Restrictions tab > verify that under the tab Functionality, that the checkbox for Allow sending diagnostic and usage data to Apple is unchecked. Or, from the device: Settings > General > VPN & Device Management > <_Profile Name_> > Restrictions > Confirm Diagnostic submission not allowed is displayed.
How it is fixed
Fix method: Guidance or infrastructure patch
Apple Configurator > Configuration Profile > Restrictions tab > under the tab Functionality, uncheck the checkbox for Allow sending diagnostic and usage data to Apple > Deploy the Configuration Profile.
Properties
- Operating systems
- Any
- Tags
- iosend-user-owned
- Reference
- CIS Apple iOS 26 Benchmark v1.0.0 - 2.2.1.11 Ensure "Allow sending diagnostic and usage data to Apple" is set to "Disabled"