BlackBerry Web Desktop Manager must be configured to disable a user's capability to perform self-service tasks.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| BBDS-00-000285 | BBDS-00-000285 | BBDS-00-000285_rule | Medium |
| Description |
|---|
| The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When these configurations are not set as required, users may have the capability to activate unauthorized BlackBerry devices. |
| STIG | Date |
|---|---|
| BlackBerry Enterprise Service v10.1.x BlackBerry Device Service STIG | 2013-10-25 |
Details
| Check Text ( C-BBDS-00-000285_chk ) |
|---|
| Review the BlackBerry Device Service server configuration to ensure the BlackBerry Administration Service (BAS) has been configured to disable users from performing administrative tasks on the BlackBerry Device Service server. Log into the BlackBerry Administration Service as an administrator with a Security Administrator role. Under "Organization Administration", expand "Organization". - Click "My organization". - Click the "BlackBerry Web Desktop Manager Information" tab. - On the "Allowed user operations", verify "Allow users to perform self service tasks:" is set to No. If not set as required, this is a finding. |
| Fix Text (F-BBDS-00-000285_fix) |
|---|
| The BlackBerry Administration Service is configured to disable a user from performing self-service tasks via BlackBerry Web Desktop Manager. |