Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-234244 | SRG-APP-000427-UEM-100009 | SV-234244r617354_rule | Medium |
Description |
---|
It is critical that the UEM agent only use validated certificates for policy updates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the code or policy. Satisfies: FMT_SMF_EXT.4.1 |
STIG | Date |
---|---|
Unified Endpoint Management Agent Security Requirements Guide | 2020-12-14 |
Check Text ( C-37429r612038_chk ) |
---|
Verify the UEM Agent performs the following functions: Import the certificates to be used for authentication of UEM Agent communications. If the UEM Agent does not perform the following functions: Import the certificates to be used for authentication of UEM Agent communications, this is a finding. |
Fix Text (F-37394r612039_fix) |
---|
Configure the UEM Agent to perform the following functions: Import the certificates to be used for authentication of UEM Agent communications. |