os_map_pki_identity Map identity for PKI based authentication
NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
All changes in this version
Title
Map identity for PKI based authentication
Control
For directory bound systems, the technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
Discussion
Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.
Fix
For directory bound systems, the technology inherently meets this requirement. No fix is required.