Automatic Screen Saver initiation must be enabled when smart card is removed from machine.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Associated with IA controls: ECSC-1

SV-38572r1_rule Automatic Screen Saver initiation must be enabled when smart card is removed from machine.

Vulnerability discussion

When using a smart card for authentication the system must be configured to automatically lock the system when the smart card is removed.

Check content

Open System Preferences. Click the Security Icon. Click the General Tab. Ensure "Activate screen saver when login token is removed" option is selected. If the option is not selected, this is a finding. NOTE: If you are not using a smart card application, this check does not apply. NOTE: This configuration option is still available if a smart card application is not installed.

Fix text

Open System Preferences. Click the Security Icon. Click the General Tab. Select "Activate screen saver when login token is removed".

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.