BaselineWatch
Desk

os_map_pki_identity Map identity for PKI based authentication

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded macOS

Title

Map identity for PKI based authentication

Control

For directory bound systems, the technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.

Discussion

Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.

Fix

For directory bound systems, the technology inherently meets this requirement. No fix is required.