Zebra Android 10 must be provisioned as a fully managed device and configured to create a Work Profile.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-242559	ZEBR-10-009600	SV-242559r714522_rule		Medium

Description
The Android Enterprise Work Profile is the designated application group for the COPE use case. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Zebra Android 10 COPE Security Technical Implementation Guide	2021-05-27

Details

Check Text ( C-45834r714520_chk )
Verify that Zebra Android 10 is configured as Corporate Owned Work Managed. This procedure is performed on both the MDM Administrator Console and the Zebra Android 10 device. On the MDM console, verify that the default enrollment is set to Corporate Owned Work Managed. On the Zebra Android 10 device: 1. Go to the application drawer. 2. Verify a Personal tab and a Work tab are present. If on the MDM console the default enrollment is not set to Corporate Owned Work Managed or on the Zebra Android 10 device the user does not see a Work tab, this is a finding.

Check Text ( C-45834r714520_chk )

Verify that Zebra Android 10 is configured as Corporate Owned Work Managed.

This procedure is performed on both the MDM Administrator Console and the Zebra Android 10 device.

On the MDM console, verify that the default enrollment is set to Corporate Owned Work Managed.

On the Zebra Android 10 device:
1. Go to the application drawer.
2. Verify a Personal tab and a Work tab are present.

If on the MDM console the default enrollment is not set to Corporate Owned Work Managed or on the Zebra Android 10 device the user does not see a Work tab, this is a finding.

Fix Text (F-45791r714521_fix)
Configure Zebra Android 10 as Corporate Owned Work Managed. On the MDM console, configure the default enrollment as Corporate Owned Work Managed. Refer to the MDM documentation to determine how to configure the device to enroll as Corporate Owned Work Managed.