UCF STIG Viewer Logo

S/MIME must be installed on smartphones so users can sign/encrypt email.


Overview

Finding ID Version Rule ID IA Controls Severity
V-24983 WIR-MOS-AND-003 SV-35013r1_rule ECSC-1 Medium
Description
S/MIME provides the capability for users to send and receive S/MIME email messages from wireless email devices. S/MIME and digital signatures provide assurance the message is authentic and is required by DoD policy. Without S/MIME users will not be able to read encrypted email and will not be able to encrypt email with sensitive information.
STIG Date
Android 2.2 (Dell) Security Technical Implementation Guide 2011-11-28

Details

Check Text ( C-34889r1_chk )
Verify an S/MIME profile is installed on the Android device:

-Log into the Android device
-Open the Good application.
Go to Preferences.
-Verify Smartcard and S/MIME specific settings are listed.

If not listed, mark as a finding.
Fix Text (F-27624r1_fix)
Provision smartphones with S/MIME so that users can digitally sign and encrypt emergency and/or critical e-mail notifications.