Windows Phone 8.1 must be running build 8.10.15116 or higher (GDR2).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-59025	MSWP-81-501414	SV-73455r1_rule		Medium

Description
Throughout ongoing operating system development, Windows Phone has a process of MOS updates to add new features including improved enterprise and security capabilities as well as fixes to issues discovered after its initial release. These releases are termed General Distribution Releases (GDR). In working with DoD and our enterprise customers worldwide, requirements and issues were discovered that resulted in necessary changes to the Windows Phone MOS. One of those changes in the General Distribution Release 2 (GDR2) provides the capability needed to implement the VPN process required by the DoD to ensure that personal cloud services are blocked from use by the end user, and is the key to success for all associated requirements. SFR ID: FMT_SMF.1.1 #42

Description

Throughout ongoing operating system development, Windows Phone has a process of MOS updates to add new features including improved enterprise and security capabilities as well as fixes to issues discovered after its initial release. These releases are termed General Distribution Releases (GDR). In working with DoD and our enterprise customers worldwide, requirements and issues were discovered that resulted in necessary changes to the Windows Phone MOS. One of those changes in the General Distribution Release 2 (GDR2) provides the capability needed to implement the VPN process required by the DoD to ensure that personal cloud services are blocked from use by the end user, and is the key to success for all associated requirements. SFR ID: FMT_SMF.1.1 #42

STIG	Date
Microsoft Windows Phone 8.1 Security Technical Implementation Guide	2015-03-26

Details

Check Text ( C-59815r2_chk )
The procedure is performed only on the Windows Phone 8.1 device. 1. From the Start page swipe to the left to show the App list. 2. Find and tap on "Settings". 3. In the Settings list tap on "about". 4. Tap on the "more info" button. 5. Verify that the "OS version" number is greater than or equal to 8.10.15116 to meet all DISA STIG requirements including VPN. If the "OS version" number under settings/About/more info is not greater than or equal to 8.10.15116, this is a finding.

Check Text ( C-59815r2_chk )

The procedure is performed only on the Windows Phone 8.1 device.

1. From the Start page swipe to the left to show the App list.
2. Find and tap on "Settings".
3. In the Settings list tap on "about".
4. Tap on the "more info" button.
5. Verify that the "OS version" number is greater than or equal to 8.10.15116 to meet all DISA STIG requirements including VPN.

If the "OS version" number under settings/About/more info is not greater than or equal to 8.10.15116, this is a finding.

Fix Text (F-64419r1_fix)
Ensure that the devices being used are running operating system build 8.10.15116 or higher (GDR2).