BaselineWatch
Desk

system_settings_time_server_configure Configure macOS to Use an Authorized Time Server

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Configure macOS to Use an Authorized Time Server

Control

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.MCX')\
.objectForKey('timeServer').js
EOS

Discussion

Approved time server _MUST_ be the only server configured for use. As of macOS 10.13 only one time server is supported.

This rule ensures the uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.

Related controls

au-12.1, sc-45.1

Fix

This is implemented by a Configuration Profile.