STIGQter: STIG Summary: Apple iOS/iPadOS 26 Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Apple iOS/iPadOS 26 must be configured to disable "Auto Unlock" of the iPhone by an Apple Watch.

DISA Rule

SV-278823r1150716_rule

Vulnerability Number

V-278823

Group Title

PP-MDF-993300

Rule Version

AIOS-26-014800

Severity

CAT II

CCI(s)

• CCI-000765 - Implement multifactor authentication for network access to privileged accounts.
• CCI-002235 - Prevent non-privileged users from executing privileged functions.

Weight

10

Fix Recommendation

If the AO has not approved the use of Apple Watch with DOD-owned iPhones, configure the Apple iOS configuration profile to disable "Allow auto unlock".

The procedure for implementing this control will vary depending on the MDM/EMM used by the mobile service provider.

In the MDM console, set "Allow auto unlock" to "False".

Configuration Profile Key: allowAutoUnlock

This requirement will become "Supervised only" in a future iOS/iPadOS release.

Check Contents

Review configuration settings to confirm "Allow Auto Unlock" is disabled.

This check procedure is performed on the device management tool.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the iOS management tool, verify "Allow auto unlock" is not checked.

If Allow auto unlock is enabled, this is a finding.

This requirement will become "Supervised only" in a future iOS/iPadOS release.

Vulnerability Number

V-278823

Documentable

False

Rule Version

AIOS-26-014800

Severity Override Guidance

Review configuration settings to confirm "Allow Auto Unlock" is disabled.

This check procedure is performed on the device management tool.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the iOS management tool, verify "Allow auto unlock" is not checked.

If Allow auto unlock is enabled, this is a finding.

This requirement will become "Supervised only" in a future iOS/iPadOS release.

Check Content Reference

M

Target Key

5723