os_auto_unlock_disable Prevent Apple Watch from Unlocking a Device
NIST macOS Security Compliance Project iOS 26 Guidance, Revision 3.0 (6262df0)
All changes in this version
All changes in this version
Title
Prevent Apple Watch from Unlocking a Device
Discussion
Apple Watches are not an approved authenticator and their use _MUST_ be disabled.
Disabling Apple watches is a necessary step to ensuring that the information system retains a session lock until the user reestablishes access using an authorized identification and authentication procedures.
Related controls
ac-11
Fix
This is implemented by a Configuration Profile