An error occurred:

Samsung Android OS 14 with Knox 3.x COPE STIG

Samsung Android OS 14 with Knox 3.x COPE Security Technical Implementation Guide

ID Vuln ID Title Cat Status
KNOX-14-210170 V-258678 Samsung Android must be configured to disallow configuration of the device's date and time. Cat II
KNOX-14-210180 V-258679 Samsung Android's Work profile must have the DOD root and intermediate PKI certificates installed. Cat II
KNOX-14-210190 V-258680 Samsung Android's Work profile must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: Names. Cat II
KNOX-14-210200 V-258681 Samsung Android's Work profile must be configured to not allow installation of applications with the following characteristics: - Back up MD data to non-DOD cloud servers (including user and application access to cloud backup services); - Transmit MD diagnostic data to non-DOD servers; - Voice assistant application if available when MD is locked; - Voice dialing application if available when MD is locked; - Allows synchronization of data or applications between devices associated with user; and - Allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers. Cat II
KNOX-14-210210 V-258682 Samsung Android must be configured to not display the following (Work Environment) notifications when the device is locked: All notifications. Cat II
KNOX-14-210220 V-258683 Samsung Android's Work profile must be configured to enable audit logging. Cat II
KNOX-14-210230 V-258684 Samsung Android's Work profile must be configured to prevent users from adding personal email accounts to the work email app. Cat II
KNOX-14-210240 V-258685 Samsung Android's Work profile must be configured to not allow backup of all applications, configuration data to remote systems.- Disable Data Sync Framework. Cat II
KNOX-14-210250 V-258686 Samsung Android's Work profile must be configured to disable exceptions to the access control policy that prevent application processes and groups of application processes from accessing all data stored by other application processes and groups of application processes. Cat II
KNOX-14-210260 V-258687 Samsung Android's Work profile must allow only the Administrator (management tool) to perform the following management function: Install/remove DOD root and intermediate PKI certificates. Cat II
KNOX-14-210270 V-258688 Samsung Android must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including DOD-approved commercial app repository, management tool server, or mobile application store. Cat II
KNOX-14-210280 V-258689 Samsung Android's Work profile must be configured to enable Common Criteria (CC) mode. Cat III
KNOX-14-210290 V-258690 Samsung Android must not accept the certificate when it cannot establish a connection to determine the validity of a certificate. Cat III
KNOX-14-210300 V-258691 Samsung Android device users must complete required training. Cat II
KNOX-14-210310 V-258692 The Samsung Android device must have the latest available Samsung Android operating system (OS) installed. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.