Title

Automatic Screen Saver initiation must be enabled when smart card is removed from machine. (Cat II impact)

Discussion

When using a smart card for authentication the system must be configured to automatically lock the system when the smart card is removed.

Check Content

Open System Preferences. Click the Security Icon. Click the General Tab. Ensure "Activate screen saver when login token is removed" option is selected. If the option is not selected, this is a finding. NOTE: If you are not using a smart card application, this check does not apply. NOTE: This configuration option is still available if a smart card application is not installed.

Fix Text

Open System Preferences. Click the Security Icon. Click the General Tab. Select "Activate screen saver when login token is removed".

Additional Identifiers

Rule ID: SV-38572r1_rule

Vulnerability ID: V-25379

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.