Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-26152 | WIR-GMMS-012 | SV-32858r2_rule | ECCR-1 | Medium |
Description |
---|
Sensitive DoD data could be exposed if the required setting is not configured on the Good server. If S/MIME support is not configured on the server, the user will not be able to view critical encrypted email or be able to encrypt email with sensitive DoD information. |
STIG | Date |
---|---|
Mobile Device Management (MDM) Server Security Technical Implementation Guide (STIG) | 2013-01-17 |
Check Text ( C-33609r4_chk ) |
---|
This check is valid only with the Good Technology MDM server. It is Not Applicable (NA) for all other MDM servers. -Log into the Good server management interface, select the Settings tab, and open the Secure Messaging (S/MIME) section. -Verify Enable Secure Messaging (S/MIME) is checked. Mark as a finding if Enable Secure Messaging (S/MIME) is not checked. |
Fix Text (F-29209r1_fix) |
---|
Enable S/MIME on the Good server. |