The BlackBerry Device Service server must be configured to accept only trusted connections to back-office enclave application or web push servers. Push servers are set up to push content to BlackBerry users.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-48559	BBDS-00-000300	SV-61435r1_rule		Medium

Description
Only authorized servers should be able to push content to BlackBerry devices.

STIG	Date
BlackBerry Enterprise Service v10.2.x BlackBerry Device Service STIG	2014-04-15

Details

Check Text ( C-50887r1_chk )
Verify the site has configured the BlackBerry Device Service server to require trusted connections to push enclave application or web servers. Otherwise, this is a finding.

Fix Text (F-52165r1_fix)
Configure the BlackBerry Device Service server to push content to BlackBerry devices. Log into BlackBerry Administration Service, and under "Servers and components" on the left side of the screen, navigate to "'BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service > ". - On the "Instance information" tab, click "Edit instance". - In the "Access control" section, verify "Push authentication:" is set to "Yes".

Fix Text (F-52165r1_fix)

Configure the BlackBerry Device Service server to push content to BlackBerry devices.

Log into BlackBerry Administration Service, and under "Servers and components" on the left side of the screen, navigate to "'BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service > ".
- On the "Instance information" tab, click "Edit instance".
- In the "Access control" section, verify "Push authentication:" is set to "Yes".