Big Sur - Enforce Screen Saver Password

Information

Users _MUST_ authenticate when unlocking the screen saver.

The screen saver acts as a session lock and prevents unauthorized users from accessing the current user's account.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.screensaver:
askForPassword:
True

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11, 800-53|AC-11b., CCE|CCE-85443-0, CCI|CCI-000056, STIG-ID|APPL-11-000002

Plugin: Unix

Control ID: a41662c1e923c709da874c5ab7cba5244757ca0e517bcfd6100337452778397d