Automatic Screen Saver initiation must be enabled when smart card is removed from machine.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-25379 | OSX00700 M6 | SV-38572r1_rule | ECSC-1 | Medium |
| Description |
|---|
| When using a smart card for authentication the system must be configured to automatically lock the system when the smart card is removed. |
| STIG | Date |
|---|---|
| MAC OSX 10.6 Workstation Security Technical Implementation Guide | 2013-04-09 |
Details
| Check Text ( C-37765r1_chk ) |
|---|
| Open System Preferences. Click the Security Icon. Click the General Tab. Ensure "Activate screen saver when login token is removed" option is selected. If the option is not selected, this is a finding. NOTE: If you are not using a smart card application, this check does not apply. NOTE: This configuration option is still available if a smart card application is not installed. |
| Fix Text (F-33010r1_fix) |
|---|
| Open System Preferences. Click the Security Icon. Click the General Tab. Select "Activate screen saver when login token is removed". |