Detections
Analytics
GOOG-09-002300 - Google Android Pie must be configured to disable trust agents. Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the products Common Criteria evaluation.
Information
Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. This technology would allow unauthorized users to have access to DoD sensitive data if compromised. By not permitting the use of non-password authentication mechanisms, users are forced to use passcodes that meet DoD passcode requirements.SFR ID: FMT_SMF_EXT.1.1 #23, FIA_UAU.5.1
Solution
Configure Google Android Pie to disable trust agents.On the MDM console:
1. Open Lock screen restrictions section.
2. Set 'Disable trust agents' to on.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_9-x_V2R1_STIG.zip
Item Details
Audit Name: AirWatch - DISA Google Android 9.x v2r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6(1), 800-53|CM-6b., 800-53|CM-7a., CAT|II, CCI|CCI-000366, CCI|CCI-000370, CCI|CCI-000381, Rule-ID|SV-228288r617455_rule, STIG-ID|GOOG-09-002300, STIG-Legacy|SV-106429, STIG-Legacy|V-97325, Vuln-ID|V-228288
Plugin: MDM
Control ID: a40059a1d3ac6c05d764be2da501b4ae35dbb3ab6a04c38d47b3c9e3dc4a3e6c