Skip to content

Apple iOS/iPadOS 16 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

An XCCDF Rule

Description

When a user is allowed to use AirPlay without a password, it may mistakenly associate the iPhone and iPad with an AirPlay-enabled device other than the one intended (i.e., by choosing the wrong one from the AirPlay list displayed). This creates the potential for someone in control of a mistakenly associated device to obtain DoD sensitive information without authorization. Requiring a password before such an association mitigates this risk. Passwords do not require any administration and are not required to comply with any complexity requirements. SFR ID: FMT_SMF_EXT.1.1 #40

ID
SV-254611r959010_rule
Version
AIOS-16-010900
Severity
Low
References
Updated

Remediation Templates

A Manual Procedure

Install a configuration profile to require the user to enter a password when connecting to an AirPlay-enabled device for the first time.