The BlackBerry Enterprise Mobility Server (BEMS) server must be configured to enable FIPS mode.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254729	BEMS-03-014800	SV-254729r879616_rule		Medium

Description
Encryption is only as good as the encryption modules utilized. Unapproved cryptographic module algorithms cannot be verified and cannot be relied upon to provide confidentiality or integrity, and DOD data may be compromised due to weak algorithms. In addition, the application must be configured to use the FIPS version of all cryptographic algorithms and modules.

STIG	Date
BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide	2023-05-17

Details

Check Text ( C-58340r861910_chk )
Verify FIPS Mode is enabled for BEMS. 1. Under BEMS Systems Settings select "BEMS Configuration". 2. Select "FIPS Mode". 3. Confirm "Enable FIPS Mode for Cluster" has been selected. If "Enable FIPS Mode for Cluster" is not selected, this is a finding.

Fix Text (F-58286r861911_fix)
Enable FIPS Mode for BEMS. 1. In the BEMS Dashboard, under "BEMS Configuration", click "FIPS Mode". 2. Check the box "Enable FIPS Mode for Cluster". 3. Click "Save".