BlackBerry 10 OS must display the DoD warning banner exactly as specified at startup device unlock.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-38290	BB10-00-000100	SV-50090r2_rule		Low

Description
The operating system is required to display the DoD approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. This ensures the legal requirements for auditing and monitoring are met. System use notification messages can be displayed when individuals log in to the information system. The approved DoD text must be used as specified in the DoD CIO memorandum dated 9 May 2008 (see the check text for required wording).

Description

The operating system is required to display the DoD approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. This ensures the legal requirements for auditing and monitoring are met. System use notification messages can be displayed when individuals log in to the information system. The approved DoD text must be used as specified in the DoD CIO memorandum dated 9 May 2008 (see the check text for required wording).

STIG	Date
BlackBerry 10 OS Security Technical Implementation Guide	2014-08-27

Details

Check Text ( C-45837r3_chk )
From either the Work Space or Personal Space, while holding the Power button, select "Lock" to lock the device. Ensure "I've read & consent to terms in IS user agreem't." is displayed on the lock screen. Otherwise, this is a finding.

Fix Text (F-43228r3_fix)
On BlackBerry Device Service: 1. To open the command window for the BlackBerry Enterprise Service 10 User Administration Tool, on the computer that hosts the tool, on the taskbar, click Start >> All Programs >> BlackBerry Resource Kit for BlackBerry Enterprise Service 10 >> BlackBerry Enterprise Service 10 User Administration Tool. 2. Type besuseradminclient -set_owner_info -u . 3. Perform any of the following actions: • To specify the owner name to display, type -name "". • To specify a single line of text, type -info "I've read & consent to terms in IS user agreem't.". • To specify multiple lines of text using an input file, type -infofile . NOTE: This fix procedure affects both Personal and Work Spaces.

Fix Text (F-43228r3_fix)

On BlackBerry Device Service:
1. To open the command window for the BlackBerry Enterprise Service 10 User Administration Tool, on the computer that hosts the tool, on the taskbar, click Start >> All Programs >> BlackBerry Resource Kit for BlackBerry Enterprise Service 10 >> BlackBerry Enterprise Service 10 User Administration Tool.
2. Type besuseradminclient -set_owner_info -u .
3. Perform any of the following actions:
• To specify the owner name to display, type -name "".
• To specify a single line of text, type -info "I've read & consent to terms in IS user agreem't.".
• To specify multiple lines of text using an input file, type -infofile .

NOTE: This fix procedure affects both Personal and Work Spaces.