The MDM server must be capable of scanning the hardware version of managed mobile devices and alert if unsupported versions are found.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36029	SRG-APP-999-MDM-027-MDIS	SV-47418r1_rule		High

Description
Approved versions of devices have gone though all required phases of testing, approval, etc., and are able to support required security features. Using non-approved versions of mobile device hardware could compromise the security baseline of the mobile system, since some required security features may not be supported.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44268r1_chk )
Review the MDM server configuration to determine whether the MDM server is able to be configured to scan the version of the mobile device hardware and alert if unsupported versions are found. If the MDM server cannot be configured to scan the hardware version of managed mobile devices and alert if unsupported versions are found, this is a finding.

Fix Text (F-40559r1_fix)
Use only MDM servers that are capable of scanning the hardware version of managed mobile devices and alert if unsupported versions are found.