macOS 15 - Sequoia

The macOS system must disable Apple ID setup during Setup Assistant

STIG ID: APPL-15-002035 | SRG: SRG-OS-000095-GPOS-00049 | Severity: Medium | CCI: CCI-000381 | Vulnerability ID: V-268496

Description

The prompt for Apple ID setup during Setup Assistant must be disabled.macOS will automatically prompt new users to set up an Apple ID while they are going through Setup Assistant if this is not disabled. This can mislead new users into thinking they need to create Apple ID accounts upon their first login.

Check

C-268496r1034428_chk

Verify the macOS system is configured to disable Apple ID setup during Setup Assistant with the following command:/usr/bin/osascript -l JavaScript << EOS$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\.objectForKey('SkipCloudSetup').jsEOSIf the result is not "true", this is a finding.

Fix

F-72427r1034427_fix

Configure the macOS system to disable Apple ID setup during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.