system_settings_time_server_configure Configure macOS to Use an Authorized Time Server
NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
All changes in this version
Title
Configure macOS to Use an Authorized Time Server
Control
/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.MCX')\
.objectForKey('timeServer').js
EOS
Discussion
Approved time server _MUST_ be the only server configured for use. As of macOS 10.13 only one time server is supported.
This rule ensures the uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.
Related controls
au-12.1, sc-45.1
Fix
This is implemented by a Configuration Profile.