Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The mobile operating system must prevent the installation of applications that are not digitally signed with a DoD approved private key.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-33052 | SRG-OS-000090-MOS-000060 | SV-43450r1_rule | High |
| Description |
|---|
| Any changes to the hardware, software, and/or firmware components of the information system and/or application can potentially have significant effects on the overall security of the system. Digital signatures on code provide assurance that the code comes from a known source and has not been modified. |
| STIG | Date |
|---|---|
| Mobile Operating System Security Requirements Guide | 2013-07-03 |
Details
| Check Text ( C-41321r1_chk ) |
|---|
| Review the mobile operating system configuration for preventing installation of applications that are not digitally signed with a DoD approved private key. If the mobile operating system does not prevent the installation of applications that are not digitally signed with a DoD approved private key, this is a finding. |
| Fix Text (F-36952r1_fix) |
|---|
| Configure the operating system to prevent the installation of applications that are not digitally signed with a DoD approved private key. |