V-276416
Apple visionOS 2 Security Technical Implementation Guide
Title
Apple Vision Pro hardware must not be modified to use the Developer Strap unless use is approved on a case-by-case basis by the authorizing official (AO).
Description
<VulnDiscussion>The Apple Developer Strap provides a USB connector on the AVP and is used to download content on the AVP from a Mac. Using the Developer Strap without authorization is considered an unauthorized modification to the DOD owned AVP. The Developer Strap is sold by Apple only to registered Apple developers but can also be bought online. Data cannot be downloaded from the AVP to a connected Mac and does not currently provide access to an AVP enterprise network to the connected Mac. Onl...
Fix Text (Documentation Requirement)
Train AVP users to not connect and use the Developer Strap unless the AO has approved its use for a specific use case (refer to AVOS-02-011900). AO use approval must be documented and must detail specific use cases for which its use is approved.