Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The MDM server must support administrator authentication to the server via the Enterprise Authentication Mechanisms authentication.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36024 | SRG-APP-166-MDM-021-SRV | SV-47413r1_rule | Medium |
| Description |
|---|
| In the DoD, Administrator credential requirements for authentication are defined by CTO 07-115 Rev 1, which is usually enforced by the Enterprise Authentication Mechanism. Non-complaint credential enforcement mechanisms make the DoD IS vulnerable to attack. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44263r1_chk ) |
|---|
| Review the MDM server configuration to determine whether authentication to the server is being performed by the Enterprise Authentication Mechanism. If access to the server is not being authenticated via this method, this is a finding. |
| Fix Text (F-40554r1_fix) |
|---|
| Configure the MDM server to support administrator authentication to the server via the Enterprise Authentication Mechanism's authentication. |