Carnegie Mellon University

Secure Your macOS Computer

  1. Click Apple menu > System Settings > General > Software Update
  2. Click the information icon.
  3. Click the slider for each of the following settings to enable it:
    1. Check for updates
    2. Download new updates
    3. Install macOS updates
    4. Install Security Responses and System files
      Note: Security Responses are security improvements applied between normal updates without a restart.
  4. When prompted, enter the Administrator userID and password for your account and click Modify Settings.
  5. If any software updates are available for installation, click Update Now. Follow the prompts to download and install the software.
  1. Update other software applications you may have. Most applications can be updated by selecting Check for Updates in one of the App Store, System Preferences or System Settings, or Help.
  2. Run QUALYS Browser Check regularly. This tool will walk you through updating any browser-related applications; and will help you protect your computer from those actively exploiting security flaws through the web.

macOS operates a multi-layer threat intelligence process, including tools like Gatekeeper and XProtect. macOS Ventura users can also access new features like Rapid Security Response and Lockdown Mode.

University-Owned Computers 

  1. Remove any anti-virus software on your computer.
  2. Install CrowdStrike for advanced protection from malware, viruses, and other malicious activity. This software will be pushed automatically to Desktop Support Customers (DSP).

Personally-Owned Computers

For an extra layer of protection, we recommend installing antivirus software. See available options on the ISO Security Tools page.

Password Protect Your Computer

  1. Select Apple menu > System Settings > Users & Groups
  2. Click the information icon on the account you want to protect with a password. If others use this computer, create a separate account and password for each person.
  3. Click Change Password.
  4. Follow the on-screen steps.

Turn on the Firewall

  1. Select Apple menu > System Settings > Network.
  2. Click Firewall.
  3. If the firewall is not on, click the slider to enable Firewall.
  4. Click Options.
  5. Verify the following settings and click OK.
    1. Uncheck - Block all incoming connections.
    2. Check - Automatically allow built-in software to receive incoming connections.
    3. Check - Automatically allow downloaded signed software to receive incoming connections.
    4. Uncheck - Enable stealth mode.

Password Protect Your Screen Saver

  1. Select Apple menu > System Settings > Lock Screen.
  2. Change Require password after screen saver begins or display is turned off to Immediately.
  3. When prompted, enter the Administrator userID and password for your account and click Modify Settings.
  4. Change Start Screen Saver when inactive to For 10 minutes.
  5. Close the window.

Note: These options will ONLY apply to the current account.

Enable FileVault

FileVault encrypts information stored on your machine so that unauthorized users can't access it if your device is lost, stolen, or left unattended. Once enabled, you will enter a password to decrypt your data when you log in. If you forget your password, you can unlock the startup disk via password, your iCloud account, or a recovery key.