---
id: os_hibernate_mode_destroyfvkeyonstandby_enable
title: Enable DestroyFVKeyOnStandby on Hibernate
discussion: |
  DestroyFVKeyOnStandby on hibernate _MUST_ be enabled.
references:
  nist:
    cce:
      macos_26:
        - CCE-95200-2
      macos_15:
        - CCE-94201-1
      macos_14:
        - CCE-92801-0
platforms:
  macOS:
    '26.0': {}
    '15.0': {}
    enforcement_info:
      check:
        shell: |-
          /usr/bin/osascript -l JavaScript << EOS
          $.NSUserDefaults.alloc.initWithSuiteName('com.apple.MCX')\
          .objectForKey('DestroyFVKeyOnStandby').js
          EOS
        result:
          string: 'true'
    introduced: '-1'
mobileconfig_info:
  - PayloadType: com.apple.MCX
    PayloadContent:
      - DestroyFVKeyOnStandby: true
