Title

The UEM Agent must use managed endpoint device key storage for all persistent secret and private keys. (Cat II impact)

Discussion

If validated secure storage locations are not used for keys, they could be compromised. Satisfies: FCS_STG_EXT.1(2)

Check Content

This requirement is not applicable if the UEM Agent is provided by the managed endpoint device operating system. Verify the UEM Agent uses the managed endpoint device key storage for all persistent secret and private keys. If the UEM Agent does not use the managed endpoint device key storage for all persistent secret and private keys, this is a finding.

Fix Text

Configure the UEM Agent must use the managed endpoint device key storage for all persistent secret and private keys.

Additional Identifiers

Rule ID: SV-234240r617354_rule

Vulnerability ID: V-234240

Group Title: SRG-APP-000176

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.