← Back to Apple iOS/iPadOS 27 Security Technical Implementation Guide

V-288387

CAT II (Medium)

Apple iOS/iPadOS 27 (MOS) must be configured to disable multiuser modes.

Rule ID

SV-288387r1287576_rule

STIG

Apple iOS/iPadOS 27 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002110

Discussion

Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DoW requirements for access control, data separation, and nonrepudiation for user accounts. In addition, the MDFPP does not include design requirements for multiuser account services. Disabling multiuser mode mitigates the risk of not meeting DoW multiuser account security policies. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Verify multiuser mode (shared iPad) is disabled in the MDM console for iPadOS devices. This requirement is not applicable for iOS devices.

If multiuser mode is not disabled in the MDM console for iPadOS devices, this is a finding.

Fix Text

Disable multiuser mode (shared iPad) in the MDM console for iPadOS devices.