Detections
Analytics

GOOG-13-007200 - Google Android 13 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

Information

Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. This technology would allow unauthorized users to have access to DOD sensitive data if compromised. By not permitting the use of non-password authentication mechanisms, users are forced to use passcodes that meet DOD passcode requirements.

SFR ID: FMT_SMF_EXT.1.1 #22, FIA_UAU.5.1

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 13 device to disable trust agents.

On the EMM console:

COBO:

1. Open 'Lock screen restrictions'.
2. Toggle 'Disable trust agents' to 'ON'.

COPE:

1. Open 'Lock screen restrictions'.
2. Select 'Personal Profile'.
3. Toggle 'Disable trust agents' to 'ON'.
4. Select 'Work Profile'.
5. Toggle 'Disable trust agents' to 'ON'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_13_Y25M10_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2(1), 800-53|IA-2(3), CAT|II, CCI|CCI-000765, CCI|CCI-000767, Rule-ID|SV-254743r1015722_rule, STIG-ID|GOOG-13-007200, Vuln-ID|V-254743

Plugin: MDM

Control ID: 3a4605b85dc173e0e6f7a0a818ef9c36e0c50bf4a9f77fc28c0eb5939af6dcf5