The macOS system must enable the time synchronization daemon.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-277058APPL-26-000180SV-277058r1149404_ruleCCI-004923medium
Description
The macOS time synchronization daemon (timed) must be enabled for proper time synchronization to an authorized time server. Note: The time synchronization daemon is enabled by default on macOS. Satisfies: SRG-OS-000355-GPOS-00143, SRG-OS-000356-GPOS-00144, SRG-OS-000785-GPOS-00250
STIGDate
Apple macOS 26 (Tahoe) Security Technical Implementation Guide2026-02-11

Related Frameworks

2 paths across 2 frameworks
NIST 800-531 mapping
  • DISA · V1R2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-004923
1.00
  • DISA · V1R2 · disa_xccdf · related

Details

Check Text (C-277058r1149404_chk)

Verify the macOS system is configured to enable the time synchronization daemon with the following command: /bin/launchctl print system | /usr/bin/grep -c -E '\tcom.apple.timed' If the result is not "1", this is a finding.

Fix Text (F-81118r1148625_fix)

Configure the macOS system to enable the time synchronization daemon with the following command: /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist Note: The service "timed" cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.