Ensure the OS Is Not Active When Resuming from Standby (Intel)

SrednjaNivo 2Ručni pregledmacos

Opis

In order to use a computer with Full Disk Encryption (FDE), macOS must keep encryption keys in memory to allow the use of the disk that has been FileVault protected. The storage volume has been unlocked and acts as if it were not encrypted. When the system is not in use, the volume is protected through encryption.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Terminal: sudo /usr/sbin/system_profiler SPHardwareDataType | /usr/bin/grep -e MacBook ; sudo /usr/bin/pmset -b -g | /usr/bin/grep -e standby If there is an output, run the following: % /usr/bin/sudo /usr/bin/pmset -b -g | /usr/bin/grep -e standby The output should include a standbydelaylow value ≤ 900, a standbydelayhigh value ≤ 900, and a highstandbythreshol

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Terminal: sudo /usr/bin/pmset -a standbydelaylow <value≤900> ; sudo /usr/bin/pmset -a standbydelayhigh <value≤900> ; sudo /usr/bin/pmset -a highstandbythreshold <value≥90>.

Svojstva

Operativni sistemi: macos-26
Oznake: macossystem-settings
Referenca: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.10.1.1 Ensure the OS Is Not Active When Resuming from Standby (Intel)