|Finding ID||Version||Rule ID||IA Controls||Severity|
|Required security features are not available in earlier OS versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF_EXT.1.1 #47|
|Samsung Android OS 8 with Knox 3.x COBO Use Case Security Technical Implementation Guide||2019-10-01|
|Check Text ( C-79929r1_chk )|
| Review configuration settings to confirm the most recently released version of Samsung Android is installed. |
This validation procedure is performed on both the MDM console and the Samsung Android 8 with Knox device.
In the MDM management console, review the version of Samsung Android installed on a sample of managed devices. This procedure will vary depending on the MDM product. See the notes below to determine the latest available OS version.
On the Samsung device:
1. Open the "Settings".
2. Tap "About phone" and then "Software information" to see the version number of the installed Android OS.
3. Tap "Software update" and "Check for updates" to determine if an OS update is available.
4. Verify the following message is shown on the screen: "Current software is up to date".
If the installed version of Android OS on any reviewed Samsung devices is not the latest released by the wireless carrier, this is a finding.
Note: Some wireless carriers list the version of the latest Android OS release by mobile device model online:
Verizon Wireless: https://www.verizonwireless.com/support/software-updates/
Google's Android OS patch website: https://source.android.com/security/bulletin/
Samsung's Android OS patch web site: https://security.samsungmobile.com/securityUpdate.smsb
|Fix Text (F-87063r1_fix)|
| Install the latest released version of Samsung Android OS on all managed Samsung devices. |
Note: In most cases, OS updates are released by the wireless carrier (for example, Sprint, T-Mobile, Verizon Wireless, and ATT).