Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
BBDS-00-000300 | BBDS-00-000300 | BBDS-00-000300_rule | Medium |
Description |
---|
Device authentication is a solution enabling an organization to manage both users and devices. This requirement applies to MDM servers that provide mobile device and user access to network shares, web servers, and other network resources located on the internal enclave (back-office servers, etc.). This connection bypasses user network authentication mechanisms (i.e., CAC authentication). Therefore, the MDM server must allow connections to only back-office network resources that support CAC authentication with the mobile device user. In this case, a trusted connection refers to mutual PKI based authentication between the MDM server and the network server. |
STIG | Date |
---|---|
BlackBerry Device Service 6.2 STIG | 2013-05-03 |
Check Text ( C-BBDS-00-000300_chk ) |
---|
Verify BDS has been configured to require trusted connections to push enclave application or web servers, using the following procedure. In the BlackBerry Administration Service in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service. - Click the instance that you want to change. - On the "Instance information" tab, click "Edit instance." - In the "Access control" section, verify "Push authentication" is set to Yes. If BDS has not been configured to require trusted connections to push enclave application or web servers, this is a finding. |
Fix Text (F-BBDS-00-000300_fix) |
---|
Configure the BlackBerry Device Service server to push content to BlackBerry devices. |