The MDM server must define the required mobile device hardware versions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-25002	WIR-GMMS-010-01	SV-30743r2_rule	ECWN-1	Low

Description
Older devices do not support required security features. Therefore, sensitive data could be at risk of being exposed if required security features are not available.

STIG	Date
Mobile Device Management (MDM) Server Security Technical Implementation Guide (STIG)	2013-05-08

Details

Check Text ( C-42282r2_chk )
1. Make a list of all iOS security policies listed on the MDM server that have been assigned to iOS devices and review each policy. 2. Select each security policy iOS devices are assigned to and, in turn, verify the required settings are in the policy. Verify the latest available version of the MDM agent is set in the compliance rule. Mark as a finding if the iOS security policy is not set up to enforce the required version of the MDM agent. Note: If there is a finding, note the name of the policy in the Findings Details section in VMS/Component Provided Tracking Database. For the Good Technology MDM: -On the left tab, select Compliance Manager. -Verify the “Device Hardware Verification” rule is listed. (Note that the rule title does not have to be exact.) -Open the rule by checking the box next to the rule, then click on Edit. -Verify the following are set: •Platform: iPhone •Check to run: Hardware model verification (title does not have to be exact) •Conditions: iPhone 4s, iPhone 5 , iPad 2 (all versions), New iPad (all versions) •Failure Action: set to “Quit Good for Enterprise” •Check Every: set to “6 hours”

Check Text ( C-42282r2_chk )

1. Make a list of all iOS security policies listed on the MDM server that have been assigned to iOS devices and review each policy.
2. Select each security policy iOS devices are assigned to and, in turn, verify the required settings are in the policy. Verify the latest available version of the MDM agent is set in the compliance rule.

Mark as a finding if the iOS security policy is not set up to enforce the required version of the MDM agent.

Note: If there is a finding, note the name of the policy in the Findings Details section in VMS/Component Provided Tracking Database.

For the Good Technology MDM:
-On the left tab, select Compliance Manager.
-Verify the “Device Hardware Verification” rule is listed. (Note that the rule title does not have to be exact.)
-Open the rule by checking the box next to the rule, then click on Edit.

-Verify the following are set:
•Platform: iPhone
•Check to run: Hardware model verification (title does not have to be exact)
•Conditions: iPhone 4s, iPhone 5 , iPad 2 (all versions), New iPad (all versions)
•Failure Action: set to “Quit Good for Enterprise”
•Check Every: set to “6 hours”

Fix Text (F-27647r2_fix)
Set up compliance rules in the MDM server defining required mobile device hardware versions.