Zebra Android 10 devices must be configured to disable the use of third-party keyboards.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-242564	ZEBR-10-011000	SV-242564r714537_rule		Low

Description
Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Zebra Android 10 COPE Security Technical Implementation Guide	2021-05-27

Details

Check Text ( C-45839r714535_chk )
Review device configuration settings to confirm that no third-party keyboards are enabled. This procedure is performed on both the MDM Administration Console and the Zebra Android 10 device. On the MDM console, review the user restrictions section. Select "Set input methods" and ensure no third-party keyboards are installed. On the Zebra Android 10 device: 1. Open Settings >> System >> Languages & input. 2. Tap "Virtual keyboard". 3. Tap "Manage keyboard". 4. Verify that no third-party keyboards are listed or that if present, they are "Disabled by admin". If third-party keyboards are enabled, this is a finding.

Check Text ( C-45839r714535_chk )

Review device configuration settings to confirm that no third-party keyboards are enabled.

This procedure is performed on both the MDM Administration Console and the Zebra Android 10 device.

On the MDM console, review the user restrictions section.

Select "Set input methods" and ensure no third-party keyboards are installed.

On the Zebra Android 10 device:
1. Open Settings >> System >> Languages & input.
2. Tap "Virtual keyboard".
3. Tap "Manage keyboard".
4. Verify that no third-party keyboards are listed or that if present, they are "Disabled by admin".

If third-party keyboards are enabled, this is a finding.

Fix Text (F-45796r714536_fix)
Configure the Zebra Android 10 device to disallow the use of third-party keyboards. On the MDM console, in the Android user restrictions section, select "Set input methods" and ensure no third-party keyboards are installed.