The Workspace ONE UEM server must be maintained at a supported version.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-221646	VMW1-00-000650	SV-221646r588007_rule		High

Description
The MDM/EMM vendor maintains specific product versions for a specific period of time. MDM/EMM server versions no longer supported by the vendor will not receive security updates for new vulnerabilities which leaves them subject to exploitation. SFR ID: FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.2

STIG	Date
VMware Workspace ONE UEM Security Technical Implementation Guide	2021-11-04

Details

Check Text ( C-23361r416776_chk )

Verify the installed version of Workspace ONE UEM server is currently supported. On the Workspace ONE UEM server console, do the following to determine the version number of the server: 1. Authenticate to the Workspace ONE UEM console as the administrator. 2. Click "About" on the bottom of the left hand menu. The version and build of the installed software will be displayed. List of current supported versions: https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/product-lifecycle-matrix.pdf, scroll to Workspace ONE UEM Console. If the displayed Workspace ONE server version is not currently supported or is not a newer version than on the list above, this is a finding.

Fix Text (F-23350r416777_fix)

Update the Workspace ONE UEM server to a supported version. See (https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/product-lifecycle-matrix.pdf) for the list of current Workspace ONE UEM supported versions. Alternatively, the Knowledge Base article can be used: https://kb.vmware.com/s/article/2960922?lang=en_US&queryTerm=workspace+one+uem+console+release+and+end+of+general+support+matrix&queryTerm=workspace+one+uem+console+release+and+end+of+general+support+matrix