Detections
Analytics

GOOG-17-009600 - Android 17 devices must be configured to enable Common Criteria (CC) mode.

Information

The CC mode feature is a superset of other features and behavioral changes that are mandatory MDFPP requirements. If CC mode is not implemented, the device will not be operating in the NIAP-certified compliant CC mode of operation.

CC mode implements the following behavioral/functional changes: How the Bluetooth and Wi-Fi keys are stored using different types of encryption.

SFR ID: FMT_SMF.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 17 device to implement CC mode.

On the EMM console:

COBO and COPE:

1. Open Device owner management.
2. Toggle 'Enable Common Criteria mode' to 'ON'.

Configuration API: setCommonCriteriaModeEnabled

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-284732r1240518_rule, STIG-ID|GOOG-17-009600, Vuln-ID|V-284732

Plugin: MDM

Control ID: a97a404e7e119f737e745e5787081d27cb20418638a2e1eceddce6b96c763ed0