Ensure "Disable Association MAC Randomization" is "Configured"

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

This is a per-network configuration setting, the auditor will need to determine which solution is appropriate for a specific network. From the Configuration Profile: Apple Configurator > Configuration Profile > Wi-Fi tab > relevant Wi-Fi configuration > Verify that the checkbox for Disable Association MAC Randomization is checked. From the device: Settings > Wi-Fi > relevant network > Ensure Private Addressis disabled.

How it is fixed

Fix method: Guidance or infrastructure patch

This remediation procedure cannot be accomplished with a checkbox, it needs to be applied on a per-network basis as appropriate. From the Configuration Profile: Apple Configurator > Configuration Profile > Wi-Fi tab > relevant Wi-Fi configuration > check the checkbox for Disable Association MAC Randomization > Deploy the Configuration Profile. From the device: Settings > Wi-Fi > relevant network > Disable the option Private Address.