Title

Site BlackBerry devices must be provisioned so users can digitally sign and encrypt e-mail notifications or any other email required by DoD policy. IT Policy rule S/MIME Minimum Strong DH Key Length (S/MIME Application policy group) must be set as required. (Cat III impact)

Discussion

S/MIME provides the capability for users to send and receive S/MIME email messages from wireless email devices. S/MIME and digital signatures provide assurance the message is authentic and is required by DoD policy.

Check Content

Detailed Policy Requirements: ***** For this check, set IT Policy rule "S/MIME Minimum Strong DH Key Length" (S/MIME Application policy group) to "1024". Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule "S/MIME Minimum Strong DH Key Length" (S/MIME Application policy group) is set as required. If not set as required, this is a finding.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-21206r4_rule

Vulnerability ID: V-19290

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.