The BlackBerry MDS Integration Service must not be installed on a production BES.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-7078	WIR1305-01	SV-7462r11_rule	ECSC-1	Medium

Description
The BlackBerry Enterprise Service MDS Integration Service is a software development platform and should not be installed on a production BES. The service, if not properly configured, can allow unsecured connections between the BlackBerry and BES and between the BES and back-office run-time application servers.

STIG	Date
BlackBerry Enterprise Server, Part 2 Security Technical Implementation Guide	2012-02-02

Details

Check Text ( C-17396r5_chk )
Detailed Policy Requirements: The MDS Integration Service must not be installed on a production BES. It should be installed only on a development or test BES when required for software development. Check Procedures: Check to see if the BlackBerry MDS Integration Service is installed on the production BES by looking at the left side of the BlackBerry Administration Server (BAS). Servers and components > BlackBerry Solution topology > BlackBerry Domain > Component view. See if the “MDS Integration Service” is installed.

Check Text ( C-17396r5_chk )

Detailed Policy Requirements:
The MDS Integration Service must not be installed on a production BES. It should be installed only on a development or test BES when required for software development.

Check Procedures:
Check to see if the BlackBerry MDS Integration Service is installed on the production BES by looking at the left side of the BlackBerry Administration Server (BAS).

Servers and components > BlackBerry Solution topology > BlackBerry Domain > Component view. See if the “MDS Integration Service” is installed.

Fix Text (F-23363r1_fix)
The BlackBerry MDS Integration Service will not be installed on the BES.