Ensure "Block untrusted TLS certificates" is set to "Yes"

高等級 2人工審核intune-ios

說明

This recommendation blocks untrusted Transport Layer Security (TLS) certificates. The benchmark marks this a Manual check of an Intune iOS/iPadOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

iOS/iPadOS: Intune admin center: Select the General heading; Verify that Block untrusted TLS certificates is present and set to Yes. On the device: Tap Restrictions; Confirm Establishing untrusted TLS connections not allowed is displayed

修補方式

修補方法: 操作指南或基礎設施修補檔

Intune admin center: Select the General heading; Set Block untrusted TLS certificates to Yes

屬性

作業系統: 不限
標籤: intune-iosintunemanual-review
參考資料: CIS Apple iOS 26 and iPadOS 26 Intune Benchmark v1.0.0 - 2.5.3 Ensure "Block untrusted TLS certificates" is set to "Yes"