iPadOS AIOS-27-006600
DISA STIG recommends
AIOS-27-006600 CAT II
Apple iOS/iPadOS 27 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoW-approved commercial app repository, MDM server, mobile application store].
NIST SP 800-53: CM-6
Check
Review configuration settings to confirm "Allow Trusting New Enterprise App Authors" is disabled. This procedure is performed in the Apple iOS/iPadOS management tool and on the iPhone and iPad. Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the Management tool, verify "Allow Trusting New Enterprise App Authors" is disabled. On the iPhone and iPad: 1. Open the Settings app. 2. Tap "General". 3. Tap "VPN & Device Management". 4. Tap the Configuration Profile from the Apple iOS/iPadOS management tool containing the restrictions policy. 5. Tap "Restrictions". 6. Verify "Trusting enterprise apps not allowed" is listed. If "Allow Trusting New Enterprise App Authors" is not disabled in the iOS/iPadOS management tool, or on the iPhone and iPad "Trusting enterprise apps not allowed" is not listed, this is a finding.
Fix
Install a configuration profile to disable "Allow Trusting New Enterprise App Authors". Configuration Profile Key: allowEnterpriseAppTrust
Our decision
Apply as published
No decision recorded: the recommendation stands. The owner signs in to change it.
All iPadOS decisions · The iPadOS baseline · The iPadOS test plan