UCF STIG Viewer Logo

BlackBerry Web Desktop Manager must be configured to disable a user's capability to perform self-service tasks.


Overview

Finding ID Version Rule ID IA Controls Severity
BBDS-00-000285 BBDS-00-000285 BBDS-00-000285_rule Medium
Description
The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When these configurations are not set as required, users may have the capability to activate unauthorized BlackBerry devices.
STIG Date
BlackBerry Device Service 6.2 STIG 2013-05-03

Details

Check Text ( C-BBDS-00-000285_chk )
Verify the BlackBerry Administration Service (BAS) has been configured to disable users from performing administrative tasks on the BlackBerry Device Service server.

Log into the BlackBerry Administration Service as an administrator with Security Administrator role.

In the BlackBerry Administration Service in the Organization administration menu, expand Organization.
- Click My organization.
- Click BlackBerry Web Desktop Manager Information.
- On the Allowed user operations, verify "Allow users to perform self service tasks" is set to No.

This is a finding if not set as required.
Fix Text (F-BBDS-00-000285_fix)
Configure the BlackBerry Administration Service to disable a user from performing self-service tasks via BlackBerry Web Desktop Manager.