Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The MDM server must use organization defined replay-resistant authentication mechanisms for network access to privileged accounts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36040 | SRG-APP-156-MDM-036-SRV | SV-47429r1_rule | High |
| Description |
|---|
| An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message. Replay attacks, if successfully used against a MDM server account could result in unfettered access to the MDM server settings and data records. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44279r1_chk ) |
|---|
| Review the MDM server configuration to ensure the system is authenticating through the Enterprise Authentication Mechanism that employs replay-resistant features. If the MDM server is not authenticating through the Enterprise Authentication Mechanism, this is a finding. |
| Fix Text (F-40570r1_fix) |
|---|
| Configure the MDM server to authenticate through the Enterprise Authentication Mechanism. |