BlackBerry PlayBook OS must enforce a minimum length for the device unlock password.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
PB21-00-000200	PB21-00-000200	PB21-00-000200_rule		Low

Description
Password complexity, or strength, is a measure of the effectiveness of a password in resisting guessing and brute force attacks. The ability to crack a password is a function of how many times an attempt to crack the password, how quickly the adversary can do each attempt, and the size of the password space. The longer the minimum length of the password is, the larger the password space.

STIG	Date
BlackBerry PlayBook OS V2.1 STIG	2013-05-03

Details

Check Text ( C-PB21-00-000200_chk )
Lock the device by "Battery icon -> Lock". Unlock the device using the device lock password. If the unlock password is less than 4 characters, this is a finding.

Fix Text (F-PB21-00-000200_fix)
Navigate to "Options -> Security -> Password -> Change Password". Input the old password under "Old Password". Under "New Password" and "Confirm Password" fields, input a new password that is greater or equal to 4 characters.