Before establishing a user session, Windows Phone 8.1 must display an administrator-specified advisory notice and consent warning banner regarding use of Windows Phone 8.1.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-58949	MSWP-81-300812	SV-73379r1_rule		Low

Description
The operating system is required to display the DoD-approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. This ensures the legal requirements for auditing and monitoring are met. System use notification messages can be displayed when individuals log on to the information system. The approved DoD text must be used as specified in the DoD CIO memorandum dated 9 May 2008. SFR ID: FTA_TAB.1.1

Description

The operating system is required to display the DoD-approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. This ensures the legal requirements for auditing and monitoring are met. System use notification messages can be displayed when individuals log on to the information system. The approved DoD text must be used as specified in the DoD CIO memorandum dated 9 May 2008. SFR ID: FTA_TAB.1.1

STIG	Date
Microsoft Windows Phone 8.1 Security Technical Implementation Guide	2015-03-26

Details

Check Text ( C-59779r1_chk )
This procedure is the same as requirement MSWP-81-100812. The procedure only has to be performed once. This validation procedure is performed on the Windows Phone mobile device: 1. Lock the phone; tap button to turn off screen. 2. Tap power button to power up. 3. Swipe up on lockscreen to reveal screen. 4. See Banner warning. 5. Verify that the DoD warning banner has the required text. If configured banner message was not viewable or does not have required text, this is a finding.

Check Text ( C-59779r1_chk )

This procedure is the same as requirement MSWP-81-100812. The procedure only has to be performed once.

This validation procedure is performed on the Windows Phone mobile device:
1. Lock the phone; tap button to turn off screen.
2. Tap power button to power up.
3. Swipe up on lockscreen to reveal screen.
4. See Banner warning.
5. Verify that the DoD warning banner has the required text.

If configured banner message was not viewable or does not have required text, this is a finding.

Fix Text (F-64343r3_fix)
This procedure is the same as requirement MSWP-81-100812. The procedure only has to be performed once. This requirement is enforced via User Based Enforcement (UBE). For Windows Phone 8.1, the following procedure must be followed: Distribute a photo to all users with phones that has a picture with the notice and consent warning message. Save that photo locally to the phone. Each user then does the following on the phone: 1. In the App list, tap Settings. 2. In the Settings list, tap lock screen. 3. Under Background, tap choose background. 4. Tap photo. 5. Tap change photo. 6. Select and tap the photo distributed by the administrator, and tap the check mark at the bottom of the photo. The phone with the notice and consent warning is now displayed before unlocking the phone.

Fix Text (F-64343r3_fix)

This procedure is the same as requirement MSWP-81-100812. The procedure only has to be performed once.

This requirement is enforced via User Based Enforcement (UBE).

For Windows Phone 8.1, the following procedure must be followed:

Distribute a photo to all users with phones that has a picture with the notice and consent warning message. Save that photo locally to the phone.

Each user then does the following on the phone:
1. In the App list, tap Settings.
2. In the Settings list, tap lock screen.
3. Under Background, tap choose background.
4. Tap photo.
5. Tap change photo.
6. Select and tap the photo distributed by the administrator, and tap the check mark at the bottom of the photo.

The phone with the notice and consent warning is now displayed before unlocking the phone.