iOS Hardening Configuration Guide - DSD

�
�
�
Passcode
(can be set via a EAS deppending
on
version, , OR Conffiguration
Profilee):
�
�
�
�
�
�
�
�
�
Profile Security
should d be “Removve
Always” if setting is for convennience
for us sers
that does nnot
contain any a sensitivve
data (e.g g. a subscrib bed calendaar
of Australian
public holiddays).
Opt-In
MDM proffiles
would usually fit in nto this cateegory
as we ell.
Profile secuurity
would usually be “ “Remove with w Passcod de” for profiles
that you u may
want IT staaff
to remove e temporariily.
Generally
users wo ould not get the passco ode to
such profilees.
Most profilees
that are not n MDM mmanaged
wo ould be set to t “Never”. The Passco ode
policy profile,
if used, should s be sset
to “Neve er”.
a maximumm
passcode length of 990
days;
require passscode
on device; d
do NOT alloow
simple value v (i.e. PPIN);
require alphhanumeric;
minimum oof
8 characte ers;
auto-lock oof
5 minutes s (Note: Current
maxim mum allowed
time on iOOS);
history of 8 passwords s;
immediate device lock k; and
auto-wipe oon
5 failed attempts. a
Dependding
on the EAS versio on, only somme
of the ab bove may be e set by thee
EAS Serve er, and
a configguration
proofile
would be b required. .
26 | Defence S ignals
Directo
rate