Blackberry Web Desktop Manager will be configured to disable a user’s capability to perform self-service tasks. This check applies to only BES 5.x.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-25430	WIR1365-02	SV-31616r1_rule	ECWN-1	Medium

Description
The overall security posture of the Blackberry system is dependent on strict configuration management controls, including ensuring only authorized Blackberry devices are being used and authorized devices are provisioned as required. When this configuration is not set as required, users may have the capability to activate unauthorized BlackBerry devices.

STIG	Date
BlackBerry Enterprise Server, Part 2 Security Technical Implementation Guide	2011-07-14

Details

Check Text ( C-31957r1_chk )
Verify the BAS has been configured to disable users from performing self-service tasks. -BAS > Servers and components > Blackberry solution topology > BlackBerry Domain > Components view > Blackberry Administration service -Select the BlackBerry Web Desktop Manager information tab. -Verify “Allow users to perform self service tasks” is set to No. Mark as a finding if not set as required.

Fix Text (F-28376r1_fix)
The Blackberry Administration Service is configured to disable a user from performing self-service tasks via BWDM.