3.2.1.11 Ensure 'Allow installing configuration profiles' is set to 'Disabled'

Information

This recommendation pertains to the installation of additional configuration profiles.

Rationale:

This recommendation allows an institution to ensure that only the configuration profiles they provide are loaded onto the device.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the 'Restrictions' tab.
4. In the right windowpane, under the tab 'Functionality', 'uncheck' the checkbox for 'Allow installing configuration profiles'.
5. Deploy the Configuration Profile.

Impact:

Some services, like wifi hotspot networks, may be prevented from working by blocking their configuration profiles.

See Also

https://workbench.cisecurity.org/files/1806

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|5.1

Plugin: MDM

Control ID: 8fac19d0bf0c870551af50ab1f1c7fa026b2ca085c5ffd5fba3da9616ad88510