Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-48577 | BBDS-00-000285 | SV-61453r1_rule | Medium |
Description |
---|
The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When these configurations are not set as required, users may have the capability to activate unauthorized BlackBerry devices. |
STIG | Date |
---|---|
BlackBerry Enterprise Service v10.2.x BlackBerry Device Service STIG | 2014-07-02 |
Check Text ( C-50903r1_chk ) |
---|
Review Windows Services configuration to ensure the BlackBerry Device Service server has been disabled to prevent users from performing self-service tasks. Otherwise, this is a finding. |
Fix Text (F-52185r1_fix) |
---|
Configure the BlackBerry Device Service server to prevent users from performing self-service tasks. Log into the BlackBerry Device Service server as a local administrator. Open "Services" by navigating to "Start > Run... > services.msc" and ensure the "BES10 - Self-Service" service is stopped and its Startup Type is set to "Disabled". |