Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The macOS system must disable TouchID for unlocking the device.
Description
Discussion Text
TouchID enables the ability to unlock a Mac system with a user's fingerprint.
TouchID must be disabled for "Unlocking your Mac" on all macOS devices that are capable of using TouchID.
The system must remain locked until the user establishes access using an authorized identification and authentication method.
Note: TouchID is not an approved biometric authenticator for U.S. federal government use as it has not been verified to meet the strength requirements outlined in NIST SP 800-63.
TouchID must be disabled for "Unlocking your Mac" on all macOS devices that are capable of using TouchID.
The system must remain locked until the user establishes access using an authorized identification and authentication method.
Note: TouchID is not an approved biometric authenticator for U.S. federal government use as it has not been verified to meet the strength requirements outlined in NIST SP 800-63.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.