Google Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-228604	GOOG-11-011100	SV-228604r510289_rule		Low

Description
The CC Mode feature is a superset of other features and behavioral changes that are mandatory MDFPP requirements. If CC mode is not implemented the device will not be operating in the NIAP-certified compliant CC Mode of operation. CC Mode implements the following behavioral/functional changes: how the Bluetooth and Wi-Fi keys are stored using different types of encryption. SFR ID: FMT_SMF_EXT.1.1 #47

Description

The CC Mode feature is a superset of other features and behavioral changes that are mandatory MDFPP requirements. If CC mode is not implemented the device will not be operating in the NIAP-certified compliant CC Mode of operation. CC Mode implements the following behavioral/functional changes: how the Bluetooth and Wi-Fi keys are stored using different types of encryption. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Google Android 11 COBO Security Technical Implementation Guide	2020-09-18

Details

Check Text ( C-30839r505637_chk )
Review device configuration settings to confirm CC mode is enabled. This procedure is performed on the EMM console. In the EMM management console, verify CC Mode has been enabled. If CC mode is not enabled, this is a finding.

Fix Text (F-30816r505638_fix)
Configure Google Android 11 device to implement CC Mode. On the EMM console, enable "CC Mode".