The BlackBerry Device Service server must be configured to prevent users from performing self-service tasks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-48577	BBDS-00-000285	SV-61453r1_rule		Medium

Description
The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When these configurations are not set as required, users may have the capability to activate unauthorized BlackBerry devices.

STIG	Date
BlackBerry Enterprise Service v10.2.x BlackBerry Device Service STIG	2015-07-23

Details

Check Text ( C-50903r1_chk )
Review Windows Services configuration to ensure the BlackBerry Device Service server has been disabled to prevent users from performing self-service tasks. Otherwise, this is a finding.

Fix Text (F-52185r1_fix)
Configure the BlackBerry Device Service server to prevent users from performing self-service tasks. Log into the BlackBerry Device Service server as a local administrator. Open "Services" by navigating to "Start > Run... > services.msc" and ensure the "BES10 - Self-Service" service is stopped and its Startup Type is set to "Disabled".