AIOS-16-009800 - Apple iOS/iPadOS 16 must be configured to disable multiuser modes.

Information

Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DoD requirements for access control, data separation, and nonrepudiation for user accounts. In addition, the MDFPP does not include design requirements for multiuser account services. Disabling multiuser mode mitigates the risk of not meeting DoD multiuser account security policies.

SFR ID: FMT_SMF_EXT.1.1 #47a

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Disable multiuser mode (shared iPad) in the MDM console for iPadOS devices.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_16_V2R1_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-2a., 800-53|CM-6b., CAT|II, CCI|CCI-000366, CCI|CCI-002110, Rule-ID|SV-254602r959010_rule, STIG-ID|AIOS-16-009800, Vuln-ID|V-254602

Plugin: MDM

Control ID: 97d312660fc225bf9f5d1bbd0f51ea9896f6a71969bfbb6ad040f814e8345ebd