[Fed-Talk] iPhone security info
[Fed-Talk] iPhone security info
- Subject: [Fed-Talk] iPhone security info
- From: Rex Sanders <email@hidden>
- Date: Thu, 30 Apr 2009 16:57:12 -0700
We don't have Apple iPhone Security Guidelines, or an approved STIG, so I wrote the following information up for interim use. Not a lot of explanation, I needed something fast.
By using Apple's Enterprise deployment tools and Exchange server, you can implement better iPhone security, especially remote wipes. We're not using either, so these instructions don't cover that. References to those tools at the end.
I know these instructions won't meet everyone's needs, maybe this will help someone.
-- Rex Sanders, USGS
*** Recommended iPhone security settings
iPhone Home > Settings > Wi-Fi > Ask to Join Networks > OFF
iPhone Home > Settings > Fetch New Data > Push > OFF
iPhone Home > Settings > Fetch New Data > Fetch > Manually
iPhone Home > Settings > Fetch New Data > Advanced > (your email config) > Manual - If you get email via Secure POP or IMAP
iPhone Home > Settings > General > Bluetooth > OFF - If you don't use a Bluetooth headset
iPhone Home > Settings > General > Auto-Lock > 5 Minutes
iPhone Home > Settings > General > Passcode Lock > Turn Passcode On
iPhone Home > Settings > General > Passcode Lock > Require Passcode > After 1 hour
iPhone Home > Settings > General > Passcode Lock > Show SMS Preview > OFF - If you get sensitive SMS text messages
iPhone Home > Settings > General > Passcode Lock > Erase Data > ON
iPhone Home > Settings > General > Restrictions > Enable Restrictions
iPhone Home > Settings > General > Restrictions > iPod Explicit > OFF
iPhone Home > Settings > General > Restrictions > Safari > ON
iPhone Home > Settings > General > Restrictions > YouTube > ON
iPhone Home > Settings > General > Restrictions > iTunes > OFF
iPhone Home > Settings > General > Restrictions > Installing Apps > OFF - Must turn ON again to install apps
iPhone Home > Settings > General > Restrictions > Camera > ON
iPhone Home > Settings > General > Home Button > Double-clicking the Home Button goes to: > Home
iPhone Home > Settings > General > Date & Time > Set Automatically > ON
iPhone Home > Settings > Safari > Block Pop-ups > ON
iPhone Home > Settings > Safari > Accept Cookies > From visited
iPhone Home > Settings > Safari > Clear History - Clear by hand from time to time
iPhone Home > Settings > Safari > Clear Cookies - Clear by hand from time to time
iPhone Home > Settings > Safari > Clear Cache - Clear by hand from time to time
*** Splash Screen
You should add a splash screen for your iPhone, indicating that the phone is US Government property, and including your contact information to help people return a lost iPhone.
1. iPhone Home > Notes
2. Press + in upper left corner to open new note
3. Type in a warning and your contact information, for example:
Property of United States Government
Unauthorized Use Prohibited
Return to:
Jane Doe, Big Government Agency
1600 Pennsylvania Ave
Washington, DC 12345
email@hidden
+1-800-555-1212
4. Take a Screen Shot:
4a. Press and hold Home button at bottom of screen
4b. Press and release Power button on top of iPhone.
You should hear a shutter snap sound.
5. iPhone Home > Photos > Camera Roll
6. Select the screen shot
7. Tap the image
8. Click the curved arrow button in lower left corner
9. Select "Use As Wallpaper"
10. Move and Scale the image as needed
11. Click "Set Wallpaper"
*** Wiping your iPhone
Before you dispose of your iPhone or give it to someone else at your agency, you must wipe the old information and settings to prevent security problems.
Wiping also erases iPhone software updates, so you must update again after wiping.
If your iPhone is below version 2.0, update before wiping.
To wipe your iPhone:
1. iPhone Home > Settings > General > Reset > Erase All Content and Settings
This will take a few hours
2. Plug your iPhone into a computer running iTunes
3. In iTunes "Source" list, select your iPhone
4. Click the "Summary" Tab
5. Click "Check for Updates"
6. Download and install the latest software
7. Detach your iPhone from the computer
*** iPhone info from Apple
Apple iPhone User Guide
http://manuals.info.apple.com/en_US/iPhone_User_Guide.pdf
Apple iPhone Enterprise Support web site, including tools for managing iPhone settings.
http://www.apple.com/support/iphone/enterprise/
Apple iPhone Enterprise Deployment Guide
http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden