| Review device configuration settings to determine if Knox external storage encryption is enabled. |
If the mobile device does not support removable media, this procedure is not applicable and is not a finding.
This procedure is performed on both the MDM Administration console and the Samsung Android device.
On the MDM console, for the device, in the "Knox encryption" group, verify that "enable external storage encryption" is selected.
On the Samsung Android device, verify that a MicroSD card must be encrypted before use.
If on the MDM console "enable external storage encryption" is not selected, or a MicroSD card can be used on the Samsung Android device without first being encrypted, this is a finding.