3.2.1.25 Ensure 'Allow setting up new nearby devices' is set to 'Disabled'

Information

This recommendation pertains to Apple's Quick Start setup feature.

Rationale:

This recommendation prevents an institutionally owned device from transferring configuration and content to another device.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the Restrictions tab.

In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow setting up new nearby devices.

Deploy the Configuration Profile.

Additional Information:

For more information on Quick Start, see: https://support.apple.com/en-us/HT201269

See Also

https://workbench.cisecurity.org/files/3064

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION

References: 800-53|CA-7, CSCv6|13, CSCv7|13.3

Plugin: MDM

Control ID: 81f5cf6ae2e146a36e812b4d4333ce4dab903d4e7e392e63e477e4d596e8b2e8