BaselineWatch
Desk

os_auto_unlock_disable Prevent Apple Watch from Unlocking a Device

NIST macOS Security Compliance Project iOS 26 Guidance, Revision 3.0 (6262df0)
All changes in this version
first version loaded iOS/iPadOS

Title

Prevent Apple Watch from Unlocking a Device

Discussion

Apple Watches are not an approved authenticator and their use _MUST_ be disabled.

Disabling Apple watches is a necessary step to ensuring that the information system retains a session lock until the user reestablishes access using an authorized identification and authentication procedures.

Related controls

ac-11

Fix

This is implemented by a Configuration Profile