The macOS system must enable the time synchronization daemon.

The macOS time synchronization daemon (timed) must be enabled for proper time synchronization to an authorized time server.

Note: The time synchronization daemon is enabled by default on macOS.

Satisfies: SRG-OS-000355-GPOS-00143, SRG-OS-000356-GPOS-00144, SRG-OS-000785-GPOS-00250

Verify the macOS system is configured to enable the time synchronization daemon with the following command:

/bin/launchctl print system | /usr/bin/grep -c -E '\tcom.apple.timed'

If the result is not "1", this is a finding.

Configure the macOS system to enable the time synchronization daemon with the following command:

/bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist

Note: The service "timed" cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.