The macOS system must enable time synchronization daemon.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-259451APPL-14-000180SV-259451r1038944_ruleCCI-004923medium
Description
The macOS time synchronization daemon (timed) must be enabled for proper time synchronization to an authorized time server. Note: The time synchronization daemon is enabled by default on macOS. Satisfies: SRG-OS-000355-GPOS-00143,SRG-OS-000356-GPOS-00144
STIGDate
Apple macOS 14 (Sonoma) Security Technical Implementation Guide2024-12-04

Related Frameworks

2 paths across 2 frameworks
NIST 800-531 mapping
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-004923
1.00
  • DISA · 2 · disa_xccdf · related

Details

Check Text (C-259451r1038944_chk)

Verify the macOS system is configured to enable time synchronization daemon with the following command: /bin/launchctl list | /usr/bin/grep -c com.apple.timed If the result is not "1", this is a finding.

Fix Text (F-63098r940974_fix)

Configure the macOS system to enable time synchronization daemon with the following command: /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist