Audit Security Keys Used With Apple Accounts

LowLevel 2Manual reviewmacos

Description

Apple has introduced the capability of using security keys to protect Apple Accounts using two-factor authentication in macOS 13.2, in iOS 16.3, and in iPadOS 16.3. This feature along with the purchase of two hardware tokens (a backup device is required) protects against the compromise of Apple Accounts. This feature requires all devices using an enrolled Apple Account to meet the minimum OS standard. Users of Apple devices are supported across their devices by using the same Apple Account to support shared data in both iCloud and across devices. Compromising an Apple Account has become a very attractive target for attackers to gain unauthorized access to iCloud storage and user devices. Two-factor authentication reduces the risk.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Graphical Method: Perform the following steps to verify if Security Keys is set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Password & Security 4. Verify that Security Keys is set to your organization's requirements

How it is fixed

Fix method: Guidance or infrastructure patch

Graphical Method: Perform the following steps to set Security Keys is set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Password & Security 4. Select Add.. to add a security key, or Remove All Security Keys ro remove security keys, to meet your organization's requirements

Properties

Operating systems: macos-14
Tags: cryptologgingmacossonoma
Reference: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.1.1.4 Audit Security Keys Used With Apple Accounts