Apple iOS/iPadOS 16 must be configured to disable multiuser modes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254602	AIOS-16-009800	SV-254602r862062_rule		Medium

Description
Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DoD requirements for access control, data separation, and nonrepudiation for user accounts. In addition, the MDFPP does not include design requirements for multiuser account services. Disabling multiuser mode mitigates the risk of not meeting DoD multiuser account security policies. SFR ID: FMT_SMF_EXT.1.1 #47a

Description

Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DoD requirements for access control, data separation, and nonrepudiation for user accounts. In addition, the MDFPP does not include design requirements for multiuser account services. Disabling multiuser mode mitigates the risk of not meeting DoD multiuser account security policies. SFR ID: FMT_SMF_EXT.1.1 #47a

STIG	Date
Apple iOS-iPadOS 16 Security Technical Implementation Guide	2023-11-21

Details

Check Text ( C-58213r862060_chk )
Verify multiuser mode (shared iPad) is disabled in the MDM console for iPadOS devices. This requirement is not applicable for iOS devices. If multiuser mode is not disabled in the MDM console for iPadOS devices, this is a finding.

Fix Text (F-58159r862061_fix)
Disable multiuser mode (shared iPad) in the MDM console for iPadOS devices.