UCF STIG Viewer Logo

Site BlackBerry devices must be provisioned so users can digitally sign and encrypt e-mail notifications or any other email required by DoD policy. IT Policy rule “S/MIME Allowed Encryption Types” (S/MIME Application policy group) must be set as required.


Overview

Finding ID Version Rule ID IA Controls Severity
V-19295 WIR1420-14 SV-21211r2_rule ECSC-1 Low
Description
S/MIME provides the capability for users to send and receive S/MIME email messages from wireless email devices. S/MIME and digital signatures provide assurance the message is authentic and is required by DoD policy.
STIG Date
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide 2012-10-01

Details

Check Text ( C-23342r2_chk )
Detailed Policy Requirements:

*****For this check, set IT Policy rule “S/MIME Allowed Encryption Types” (S/MIME Application policy group) to “Certificate based-only”.

Check Procedures:

This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify IT Policy rule S/MIME Allowed Encryption Types” (S/MIME Application policy group) is set as required.
Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.