The MDM server must provide the capability for an administrator to lock the application console.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36018	SRG-APP-004-MDM-013-SRV	SV-47407r1_rule		High

Description
If the MDM server does not support a lock feature, then anyone who gains access to the application may be able to access sensitive DoD information or perform other authorized functions. The lock features mitigates the risk of unauthorized access.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44257r1_chk )
Review the MDM server configuration to determine whether the system is configured to support a lock feature. If a lock feature is not present, this is a finding.

Fix Text (F-40548r1_fix)
Configure the MDM server so the administrator can lock the console.