TMAegisBeta
Más reglas para macos

macOS

TMA-MACOS14-2.1.1.4

Audit Security Keys Used With Apple Accounts

BajaNivel 2Revisión manualmacos

Descripción

Apple has introduced the capability of using security keys to protect Apple Accounts using two-factor authentication in macOS 13.2, in iOS 16.3, and in iPadOS 16.3. This feature along with the purchase of two hardware tokens (a backup device is required) protects against the compromise of Apple Accounts. This feature requires all devices using an enrolled Apple Account to meet the minimum OS standard. Users of Apple devices are supported across their devices by using the same Apple Account to support shared data in both iCloud and across devices. Compromising an Apple Account has become a very attractive target for attackers to gain unauthorized access to iCloud storage and user devices. Two-factor authentication reduces the risk.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Graphical Method: Perform the following steps to verify if Security Keys is set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Password & Security 4. Verify that Security Keys is set to your organization's requirements

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Graphical Method: Perform the following steps to set Security Keys is set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Password & Security 4. Select Add.. to add a security key, or Remove All Security Keys ro remove security keys, to meet your organization's requirements

Propiedades

Sistemas operativos
macos-14
Etiquetas
cryptologgingmacossonoma
Referencia
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.1.1.4 Audit Security Keys Used With Apple Accounts