UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Android 12 devices must be configured to disable the use of third-party keyboards.


Overview

Finding ID Version Rule ID IA Controls Severity
V-250449 GOOG-12-010900 SV-250449r802697_rule Low
Description
Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF_EXT.1.1 #47
STIG Date
Google Android 12 COPE Security Technical Implementation Guide 2021-09-17

Details

Check Text ( C-53884r796853_chk )
Review the managed Google Android 12 configuration settings to confirm that no third-party keyboards are enabled.

This procedure is performed on the EMM console.

On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify only the approved keyboards are selected.

If third-party keyboards are allowed, this is a finding.
Fix Text (F-53838r796854_fix)
Configure the Google Android 12 device to disallow the use of third-party keyboards.

On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Select only the approved keyboard.

Additionally, Admins can configure application allowlists for Google Play that does not have any third-party keyboards for user installation.