Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-19281 | WIR1055-02 | SV-21197r3_rule | ECSC-1 | Low |
Description |
---|
S/MIME provides the capability for users to send and receive S/MIME email messages from wireless email devices. S/MIME and digital signatures provide assurance that the message is authentic and is required by DoD policy. Reference the DoD CIO memorandum regarding interim guidance on the use of derived PKI credentials (2015-05-06 DoD Interim Guidance for Implementing Derived PKI Credentials on Unclass CMDs) for Blackberry BlackBerry certificate configuration information. |
STIG | Date |
---|---|
BlackBerry OS 7.x Security Technical Implementation Guide | 2015-07-02 |
Check Text ( C-23326r3_chk ) |
---|
If user software certificates are used on the BlackBerry instead of the CAC, verify the AO has approved their use (letter, memo, SSP, etc.). |
Fix Text (F-23347r2_fix) |
---|
BlackBerry devices must be provisioned so users can digitally sign and encrypt emergency and/or critical email notifications. |