UCF STIG Viewer Logo

Windows Phone 8.1 must be configured to disable developer modes.


Overview

Finding ID Version Rule ID IA Controls Severity
V-58931 MSWP-81-100301 SV-73361r1_rule Medium
Description
Developer modes circumvent certain security measures, so their use for standard operation is not recommended. Developer modes may increase the likelihood of compromise of confidentiality, integrity, and availability. SFR ID: FMT_SMF.1.1 #21
STIG Date
Microsoft Windows Phone 8.1 Security Technical Implementation Guide 2015-05-13

Details

Check Text ( C-59759r1_chk )
This validation procedure is performed on the MDM administration console:

On the MDM administration console:
1. Ask the MDM administrator to verify the phone compliance policy.
2. Find the setting for restricting the Allow Developer Unlock capability.
3. Verify that setting restriction is turned on.

If the MDM does not have the policy to disable developer mode enforced, this is a finding.
Fix Text (F-64323r1_fix)
Configure the MDM system to require the Allow Developer Unlocking/Developer Mode policy to be disabled for Windows Phone devices. Deploy the MDM policy on managed devices.