UCF STIG Viewer Logo

The MDM server must support and maintain the binding of digital signatures on software components and applications in storage.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36258 SRG-APP-006-MDM-235-SRV SV-47662r1_rule High
Description
Digital signatures enable the system to verify the integrity of the signed object and authenticate the object’s signatory. Failure to maintain the binding of digital signatures on software components and applications in storage makes it more likely that an adversary could modify or replace those objects. Conversely, the bindings enable the operating system to verify the software’s integrity and source with a high degree of assurance whenever necessary.
STIG Date
Mobile Device Manager Security Requirements Guide 2013-01-24

Details

Check Text ( C-44498r1_chk )
Review system configuration to determine whether the MDM server maintains the binding of digital signatures to software objects when those objects are stored after installation. If these bindings are not maintained, this is a finding.
Fix Text (F-40788r1_fix)
Configure the MDM server to maintain the binding of digital signatures to software objects when those objects are stored after installation.