TMAegisBeta
更多 ios 规则

Apple iOS

TMA-IOS-2.1.1

Ensure a "Consent Message" has been "Configured"

低级别 1人工审核ios

说明

This recommendation pertains to the configuration of a consent message shown at the time of a configuration profile installation. Typically, the enrollment of devices into a Mobile Device Management (MDM) solution requires users to provide their approval. Such approval can waive the need of a consent message. The enrolled MDM must be the organization approved MDM. Profile: Level 1 - End-User Owned Devices.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

From the Configuration Profile: Apple Configurator > Configuration Profile > General tab > verify that under the heading Consent Message, there is an appropriate consent message configured. There is no method to determine if the installed configuration profile included a consent message from the device.

修复方式

修复方法: 操作指南或基础设施补丁

Apple Configurator > Configuration Profile > General tab > under the heading Consent Message, insert an appropriate consent message > Deploy the Configuration Profile.

属性

操作系统
任意
标签
iosend-user-owned
参考
CIS Apple iOS 26 Benchmark v1.0.0 - 2.1.1 Ensure a "Consent Message" has been "Configured"