BaselineWatch
Desk

os_time_server_enabled Enable Time Synchronization Daemon

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded macOS

Title

Enable Time Synchronization Daemon

Control

/bin/launchctl list | /usr/bin/grep -c com.apple.timed

Discussion

The macOS time synchronization daemon (timed) _MUST_ be enabled for proper time synchronization to an authorized time server.

NOTE: The time synchronization daemon is enabled by default on macOS.

Related controls

au-12.1, sc-45.1

Fix

[source,bash]
----
/bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist
----

NOTE: The service `timed` cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.