os_time_server_enabled Enable Time Synchronization Daemon
NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
All changes in this version
Title
Enable Time Synchronization Daemon
Control
/bin/launchctl list | /usr/bin/grep -c com.apple.timed
Discussion
The macOS time synchronization daemon (timed) _MUST_ be enabled for proper time synchronization to an authorized time server.
NOTE: The time synchronization daemon is enabled by default on macOS.
Related controls
au-12.1, sc-45.1
Fix
[source,bash]
----
/bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist
----
NOTE: The service `timed` cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.